2026-10-11T01:40:23Z TRC kyverno/pkg/version/version.go:49 > version hash=--- logger=setup/version v=2 version=1.26.7
2026-10-11T01:40:23Z TRC kyverno/cmd/internal/flag.go:335 > add_dir_header=false logger=setup/flag v=2
2026-10-11T01:40:23Z TRC kyverno/cmd/internal/flag.go:335 > admissionReports=false logger=setup/flag v=2
2026-10-11T01:40:23Z TRC kyverno/cmd/internal/flag.go:335 > allowHTTPInNamespacedPolicies= logger=setup/flag v=2
2026-10-11T01:40:23Z TRC kyverno/cmd/internal/flag.go:335 > allowInsecureRegistry=false logger=setup/flag v=2
2026-10-11T01:40:23Z TRC kyverno/cmd/internal/flag.go:335 > allowedResults=pass,fail,error,warn,skip logger=setup/flag v=2
2026-10-11T01:40:23Z TRC kyverno/cmd/internal/flag.go:335 > alsologtostderr=false logger=setup/flag v=2
2026-10-11T01:40:23Z TRC kyverno/cmd/internal/flag.go:335 > alsologtostderrthreshold=0 logger=setup/flag v=2
2026-10-11T01:40:23Z TRC kyverno/cmd/internal/flag.go:335 > apiCallTimeout=30s logger=setup/flag v=2
2026-10-11T01:40:23Z TRC kyverno/cmd/internal/flag.go:335 > autoMemLimitEnabled=true logger=setup/flag v=2
2026-10-11T01:40:23Z TRC kyverno/cmd/internal/flag.go:335 > autoMemLimitRatio=0.9 logger=setup/flag v=2
2026-10-11T01:40:23Z TRC kyverno/cmd/internal/flag.go:335 > autoUpdateWebhooks=true logger=setup/flag v=2
2026-10-11T01:40:23Z TRC kyverno/cmd/internal/flag.go:335 > backgroundServiceAccountName=system:serviceaccount:konflux-kyverno:kyverno-background-controller logger=setup/flag v=2
2026-10-11T01:40:23Z TRC kyverno/cmd/internal/flag.go:335 > caSecretName=konflux-kyverno-svc.konflux-kyverno.svc.kyverno-tls-ca logger=setup/flag v=2
2026-10-11T01:40:23Z TRC kyverno/cmd/internal/flag.go:335 > cleanupServerHost= logger=setup/flag v=2
2026-10-11T01:40:23Z TRC kyverno/cmd/internal/flag.go:335 > cleanupServerPort=9443 logger=setup/flag v=2
2026-10-11T01:40:23Z TRC kyverno/cmd/internal/flag.go:335 > clientRateLimitBurst=200 logger=setup/flag v=2
2026-10-11T01:40:23Z TRC kyverno/cmd/internal/flag.go:335 > clientRateLimitQPS=100 logger=setup/flag v=2
2026-10-11T01:40:23Z TRC kyverno/cmd/internal/flag.go:335 > controllerRuntimeMetricsAddress=:8080 logger=setup/flag v=2
2026-10-11T01:40:23Z TRC kyverno/cmd/internal/flag.go:335 > crdWatcher=false logger=setup/flag v=2
2026-10-11T01:40:23Z TRC kyverno/cmd/internal/flag.go:335 > disableCertManagerController=false logger=setup/flag v=2
2026-10-11T01:40:23Z TRC kyverno/cmd/internal/flag.go:335 > disableLogColor=false logger=setup/flag v=2
2026-10-11T01:40:23Z TRC kyverno/cmd/internal/flag.go:335 > disableMetrics=false logger=setup/flag v=2
2026-10-11T01:40:23Z TRC kyverno/cmd/internal/flag.go:335 > dumpPatches= logger=setup/flag v=2
2026-10-11T01:40:23Z TRC kyverno/cmd/internal/flag.go:335 > dumpPayload=false logger=setup/flag v=2
2026-10-11T01:40:23Z TRC kyverno/cmd/internal/flag.go:335 > enableConfigMapCaching=true logger=setup/flag v=2
2026-10-11T01:40:23Z TRC kyverno/cmd/internal/flag.go:335 > enableCosignLogging=false logger=setup/flag v=2
2026-10-11T01:40:23Z TRC kyverno/cmd/internal/flag.go:335 > enableDeferredLoading= logger=setup/flag v=2
2026-10-11T01:40:23Z TRC kyverno/cmd/internal/flag.go:335 > enablePolicyException=false logger=setup/flag v=2
2026-10-11T01:40:23Z TRC kyverno/cmd/internal/flag.go:335 > enableReporting= logger=setup/flag v=2
2026-10-11T01:40:23Z TRC kyverno/cmd/internal/flag.go:335 > enableTracing=false logger=setup/flag v=2
2026-10-11T01:40:23Z TRC kyverno/cmd/internal/flag.go:335 > enableTuf=false logger=setup/flag v=2
2026-10-11T01:40:23Z TRC kyverno/cmd/internal/flag.go:335 > eventsRateLimitBurst=2000 logger=setup/flag v=2
2026-10-11T01:40:23Z TRC kyverno/cmd/internal/flag.go:335 > eventsRateLimitQPS=1000 logger=setup/flag v=2
2026-10-11T01:40:23Z TRC kyverno/cmd/internal/flag.go:335 > exceptionNamespace= logger=setup/flag v=2
2026-10-11T01:40:23Z TRC kyverno/cmd/internal/flag.go:335 > excludeBootstrapResources=false logger=setup/flag v=2
2026-10-11T01:40:23Z TRC kyverno/cmd/internal/flag.go:335 > exemplarFilter=trace-based logger=setup/flag v=2
2026-10-11T01:40:23Z TRC kyverno/cmd/internal/flag.go:335 > forceFailurePolicyIgnore= logger=setup/flag v=2
2026-10-11T01:40:23Z TRC kyverno/cmd/internal/flag.go:335 > generateMutatingAdmissionPolicy= logger=setup/flag v=2
2026-10-11T01:40:23Z TRC kyverno/cmd/internal/flag.go:335 > generateValidatingAdmissionPolicy= logger=setup/flag v=2
2026-10-11T01:40:23Z TRC kyverno/cmd/internal/flag.go:335 > httpAllowlist= logger=setup/flag v=2
2026-10-11T01:40:23Z TRC kyverno/cmd/internal/flag.go:335 > httpBlocklist= logger=setup/flag v=2
2026-10-11T01:40:23Z TRC kyverno/cmd/internal/flag.go:335 > imagePullSecrets= logger=setup/flag v=2
2026-10-11T01:40:23Z TRC kyverno/cmd/internal/flag.go:335 > imageVerifyCacheEnabled=true logger=setup/flag v=2
2026-10-11T01:40:23Z TRC kyverno/cmd/internal/flag.go:335 > imageVerifyCacheMaxSize=1000 logger=setup/flag v=2
2026-10-11T01:40:23Z TRC kyverno/cmd/internal/flag.go:335 > imageVerifyCacheTTLDuration=1h0m0s logger=setup/flag v=2
2026-10-11T01:40:23Z TRC kyverno/cmd/internal/flag.go:335 > kubeconfig= logger=setup/flag v=2
2026-10-11T01:40:23Z TRC kyverno/cmd/internal/flag.go:335 > leaderElectionRetryPeriod=26s logger=setup/flag v=2
2026-10-11T01:40:23Z TRC kyverno/cmd/internal/flag.go:335 > legacy_stderr_threshold_behavior=true logger=setup/flag v=2
2026-10-11T01:40:23Z TRC kyverno/cmd/internal/flag.go:335 > log_backtrace_at=:0 logger=setup/flag v=2
2026-10-11T01:40:23Z TRC kyverno/cmd/internal/flag.go:335 > log_dir= logger=setup/flag v=2
2026-10-11T01:40:23Z TRC kyverno/cmd/internal/flag.go:335 > log_file= logger=setup/flag v=2
2026-10-11T01:40:23Z TRC kyverno/cmd/internal/flag.go:335 > log_file_max_size=1800 logger=setup/flag v=2
2026-10-11T01:40:23Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag loggingFormat=text v=2
2026-10-11T01:40:23Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag loggingtsFormat=default v=2
2026-10-11T01:40:23Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag logtostderr=true v=2
2026-10-11T01:40:23Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag maxAPICallResponseLength=2000000 v=2
2026-10-11T01:40:23Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag maxAdmissionReports=1000 v=2
2026-10-11T01:40:23Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag maxAuditCapacity=1000 v=2
2026-10-11T01:40:23Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag maxAuditWorkers=8 v=2
2026-10-11T01:40:23Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag maxGlobalContextEntries=0 v=2
2026-10-11T01:40:23Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag maxQueuedEvents=1000 v=2
2026-10-11T01:40:23Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag metricsCASecretName= v=2
2026-10-11T01:40:23Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag metricsHost= v=2
2026-10-11T01:40:23Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag metricsKeyAlgorithm=RSA v=2
2026-10-11T01:40:23Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag metricsPort=8000 v=2
2026-10-11T01:40:23Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag metricsRenewBefore=360h0m0s v=2
2026-10-11T01:40:23Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag metricsServerIP= v=2
2026-10-11T01:40:23Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag metricsTLSSecretName= v=2
2026-10-11T01:40:23Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag omitEvents=PolicyApplied,PolicySkipped v=2
2026-10-11T01:40:23Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag one_output=false v=2
2026-10-11T01:40:23Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag otelCollector=opentelemetrycollector.kyverno.svc.cluster.local v=2
2026-10-11T01:40:23Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag otelConfig=prometheus v=2
2026-10-11T01:40:23Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag profile=false v=2
2026-10-11T01:40:23Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag profileAddress= v=2
2026-10-11T01:40:23Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag profilePort=6060 v=2
2026-10-11T01:40:23Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag protectManagedResources= v=2
2026-10-11T01:40:23Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag registryCredentialHelpers=default,google,amazon,azure,github v=2
2026-10-11T01:40:23Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag renewBefore=360h0m0s v=2
2026-10-11T01:40:23Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag reportsServiceAccountName= v=2
2026-10-11T01:40:23Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag resyncPeriod=15m0s v=2
2026-10-11T01:40:23Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag serverIP= v=2
2026-10-11T01:40:23Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag servicePort=443 v=2
2026-10-11T01:40:23Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag skip_headers=false v=2
2026-10-11T01:40:23Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag skip_log_headers=false v=2
2026-10-11T01:40:23Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag stderrthreshold=2 v=2
2026-10-11T01:40:23Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag tlsKeyAlgorithm=RSA v=2
2026-10-11T01:40:23Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag tlsSecretName=konflux-kyverno-svc.konflux-kyverno.svc.kyverno-tls-pair v=2
2026-10-11T01:40:23Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag tracingAddress= v=2
2026-10-11T01:40:23Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag tracingCreds= v=2
2026-10-11T01:40:23Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag tracingPort=4317 v=2
2026-10-11T01:40:23Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag transportCreds= v=2
2026-10-11T01:40:23Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag tufMirror=https://tuf-repo-cdn.sigstore.dev v=2
2026-10-11T01:40:23Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag tufRoot= v=2
2026-10-11T01:40:23Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag tufRootRaw= v=2
2026-10-11T01:40:23Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag v=2
2026-10-11T01:40:23Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag v=2 vmodule=
2026-10-11T01:40:23Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag v=2 webhookRegistrationTimeout=2m0s
2026-10-11T01:40:23Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag v=2 webhookServerHost=
2026-10-11T01:40:23Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag v=2 webhookServerPort=9443
2026-10-11T01:40:23Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag v=2 webhookTimeout=10
2026-10-11T01:40:23Z TRC kyverno/cmd/internal/maxprocs.go:12 > setup maxprocs... logger=setup/maxprocs v=2
2026-10-11T01:40:23Z TRC kyverno/cmd/internal/memlimit.go:13 > setup memlimit... logger=setup/memlimit ratio=0.9 v=2
2026-10-11T01:40:23Z TRC kyverno/cmd/internal/signal.go:16 > setup signals... logger=setup/signals v=2
2026-10-11T01:40:23Z TRC kyverno/cmd/internal/client.go:44 > create kube client... burst=200 kubeconfig= logger=setup/kube-client qps=100 v=2
2026-10-11T01:40:23Z DBG cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/features/envvar.go:195 > Feature gate default state enabled=false feature=ClientsPreferCBOR logger=klog v=1
2026-10-11T01:40:23Z DBG cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/features/envvar.go:195 > Feature gate default state enabled=true feature=InOrderInformers logger=klog v=1
2026-10-11T01:40:23Z DBG cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/features/envvar.go:195 > Feature gate default state enabled=true feature=UnlockWhileProcessingFIFO logger=klog v=1
2026-10-11T01:40:23Z DBG cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/features/envvar.go:195 > Feature gate default state enabled=true feature=WatchListClient logger=klog v=1
2026-10-11T01:40:23Z DBG cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/features/envvar.go:195 > Feature gate default state enabled=true feature=AtomicFIFO logger=klog v=1
2026-10-11T01:40:23Z DBG cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/features/envvar.go:195 > Feature gate default state enabled=true feature=InOrderInformersBatchProcess logger=klog v=1
2026-10-11T01:40:23Z DBG cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/features/envvar.go:195 > Feature gate default state enabled=true feature=InformerResourceVersion logger=klog v=1
2026-10-11T01:40:23Z DBG cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/features/envvar.go:195 > Feature gate default state enabled=false feature=ClientsAllowCBOR logger=klog v=1
2026-10-11T01:40:23Z DBG cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/features/envvar.go:195 > Feature gate default state enabled=true feature=ClientsAllowCARotation logger=klog v=1
2026-10-11T01:40:23Z DBG cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/features/envvar.go:195 > Feature gate default state enabled=true feature=ClientsAllowTLSCacheGC logger=klog v=1
2026-10-11T01:40:23Z TRC kyverno/cmd/internal/configmap.go:36 > create metrics-config-controller... logger=setup/metrics-config-controller v=2
2026-10-11T01:40:23Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.ConfigMap v=2
2026-10-11T01:40:23Z TRC kyverno/cmd/internal/configmap.go:52 > done creating metrics-config-controller logger=setup/metrics-config-controller v=2
2026-10-11T01:40:23Z TRC kyverno/cmd/internal/metrics.go:27 > setup metrics... collector=opentelemetrycollector.kyverno.svc.cluster.local creds= exemplarFilter=trace-based logger=setup/metrics otel=prometheus port=8000 tlsSecretName= v=2
2026-10-11T01:40:23Z TRC kyverno/cmd/internal/configmap.go:15 > create config-controller... logger=setup/config-controller v=2
2026-10-11T01:40:23Z INF kyverno/cmd/internal/metrics.go:159 > Starting HTTP metrics server address=[]:8000 logger=setup/metrics v=0
2026-10-11T01:40:23Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.ConfigMap v=2
2026-10-11T01:40:23Z TRC kyverno/pkg/config/config.go:433 > defaultRegistry configured defaultRegistry=docker.io logger=config name=konflux-kyverno namespace=konflux-kyverno v=2
2026-10-11T01:40:23Z TRC kyverno/pkg/config/config.go:449 > enableDefaultRegistryMutation configured enableDefaultRegistryMutation=true logger=config name=konflux-kyverno namespace=konflux-kyverno v=2
2026-10-11T01:40:23Z TRC kyverno/pkg/config/config.go:458 > excludedGroups configured excludeGroups=["system:nodes"] includeGroups=[] logger=config name=konflux-kyverno namespace=konflux-kyverno v=2
2026-10-11T01:40:23Z TRC kyverno/pkg/config/config.go:463 > excludeUsernames not set logger=config name=konflux-kyverno namespace=konflux-kyverno v=2
2026-10-11T01:40:23Z TRC kyverno/pkg/config/config.go:471 > excludeRoles not set logger=config name=konflux-kyverno namespace=konflux-kyverno v=2
2026-10-11T01:40:23Z TRC kyverno/pkg/config/config.go:479 > excludeClusterRoles not set logger=config name=konflux-kyverno namespace=konflux-kyverno v=2
2026-10-11T01:40:23Z TRC kyverno/pkg/config/config.go:495 > generateSuccessEvents configured generateSuccessEvents=false logger=config name=konflux-kyverno namespace=konflux-kyverno v=2
2026-10-11T01:40:23Z TRC kyverno/pkg/config/config.go:501 > successEventActions not set logger=config name=konflux-kyverno namespace=konflux-kyverno v=2
2026-10-11T01:40:23Z TRC kyverno/pkg/config/config.go:525 > webhooks configured logger=config name=konflux-kyverno namespace=konflux-kyverno v=2 webhooks="{\"namespaceSelector\":{\"matchExpressions\":[{\"key\":\"kubernetes.io/metadata.name\",\"operator\":\"NotIn\",\"values\":[\"kube-system\"]},{\"key\":\"kubernetes.io/metadata.name\",\"operator\":\"NotIn\",\"values\":[\"konflux-kyverno\"]}],\"matchLabels\":null}}"
2026-10-11T01:40:23Z TRC kyverno/pkg/config/config.go:539 > webhookAnnotations configured logger=config name=konflux-kyverno namespace=konflux-kyverno v=2 webhookAnnotations="{\"admissions.enforcer/disabled\":\"true\"}"
2026-10-11T01:40:23Z TRC kyverno/pkg/config/config.go:545 > webhookLabels not set logger=config name=konflux-kyverno namespace=konflux-kyverno v=2
2026-10-11T01:40:23Z TRC kyverno/pkg/config/config.go:559 > matchConditions not set logger=config name=konflux-kyverno namespace=konflux-kyverno v=2
2026-10-11T01:40:23Z TRC kyverno/pkg/config/config.go:580 > enableDefaultRegistryMutation configured enableDefaultRegistryMutation=true logger=config name=konflux-kyverno namespace=konflux-kyverno v=2
2026-10-11T01:40:23Z TRC kyverno/pkg/config/config.go:595 > maxContextSize not set, using default default=2097152 logger=config name=konflux-kyverno namespace=konflux-kyverno v=2
2026-10-11T01:40:23Z TRC kyverno/cmd/internal/configmap.go:31 > done creating config-controller logger=setup/config-controller v=2
2026-10-11T01:40:23Z TRC kyverno/cmd/internal/registry.go:18 > setup registry client... insecure=false logger=setup/registry-client secrets= v=2
2026-10-11T01:40:23Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.Secret v=2
2026-10-11T01:40:23Z TRC kyverno/cmd/internal/imageverifycache.go:10 > setup image verify cache... enabled=true logger=setup/image-verify-cache maxsize=1000 ttl=1h0m0s v=2
2026-10-11T01:40:23Z TRC kyverno/cmd/internal/client.go:44 > create kube client... burst=200 kubeconfig= logger=setup/kube-client qps=100 v=2
2026-10-11T01:40:23Z TRC kyverno/cmd/internal/client.go:60 > create kyverno client... burst=200 kubeconfig= logger=setup/kyverno-client qps=100 v=2
2026-10-11T01:40:23Z TRC kyverno/cmd/internal/client.go:68 > create dynamic client... burst=200 kubeconfig= logger=setup/dynamic-client qps=100 v=2
2026-10-11T01:40:23Z TRC kyverno/cmd/internal/client.go:84 > create apiserver client... burst=200 kubeconfig= logger=setup/apiserver-client qps=100 v=2
2026-10-11T01:40:23Z TRC kyverno/cmd/internal/client.go:76 > create metadata client... burst=200 kubeconfig= logger=setup/metadata-client qps=100 v=2
2026-10-11T01:40:23Z TRC kyverno/cmd/internal/client.go:92 > create the kyverno dynamic client... burst=200 kubeconfig= logger=setup/d-client qps=100 v=2
2026-10-11T01:40:23Z TRC kyverno/cmd/internal/client.go:100 > create the events client... burst=200 kubeconfig= logger=setup/events-client qps=100 v=2
2026-10-11T01:40:23Z TRC kyverno/cmd/internal/client.go:44 > create kube client... burst=200 kubeconfig= logger=setup/events-client/kube-client qps=100 v=2
2026-10-11T01:40:23Z TRC kyverno/cmd/internal/reporting.go:13 > setting up reporting... enableReporting= generate=false imageVerify=false logger=setup/setup-reporting mutate=false mutateExisiting=false v=2 validate=false
2026-10-11T01:40:23Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.Deployment v=2
2026-10-11T01:40:23Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.Secret v=2
2026-10-11T01:40:23Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.Secret v=2
2026-10-11T01:40:24Z TRC kyverno/cmd/internal/engine.go:62 > setup exception selector... enablePolicyException=false exceptionNamespace= logger=setup/exception-selector v=2
2026-10-11T01:40:24Z TRC kyverno/cmd/internal/engine.go:91 > setup config map resolver... enableConfigMapCaching=true logger=setup/configmap-resolver v=2
2026-10-11T01:40:24Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.ConfigMap v=2
2026-10-11T01:40:24Z TRC kyverno/cmd/internal/engine.go:44 > setup engine... logger=setup/engine v=2
2026-10-11T01:40:24Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v2beta1.GlobalContextEntry v=2
2026-10-11T01:40:24Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.Deployment v=2
2026-10-11T01:40:24Z INF cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/rest/warnings.go:107 > Warning: kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ logger=klog v=0
2026-10-11T01:40:24Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.ClusterPolicy v=2
2026-10-11T01:40:24Z INF cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/rest/warnings.go:107 > Warning: kyverno.io/v1 Policy is deprecated and will be removed in a future release; migrate to NamespacedValidatingPolicy and the other namespaced policy types (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ logger=klog v=0
2026-10-11T01:40:24Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.Policy v=2
2026-10-11T01:40:25Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v2.UpdateRequest v=2
2026-10-11T01:40:25Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/metrics/server/server.go:208 > Starting metrics server logger=controller-runtime/metrics v=0
2026-10-11T01:40:25Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/metrics/server/server.go:247 > Serving metrics server bindAddress=:8080 logger=controller-runtime/metrics secure=false v=0
2026-10-11T01:40:25Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/internal/controller/controller.go:369 > Starting EventSource controller=namespacedmutatingpolicy controllerGroup=policies.kyverno.io controllerKind=NamespacedMutatingPolicy source="kind source: *v1beta1.NamespacedMutatingPolicy" v=0
2026-10-11T01:40:25Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/internal/controller/controller.go:369 > Starting EventSource controller=validatingpolicy controllerGroup=policies.kyverno.io controllerKind=ValidatingPolicy source="kind source: *v1beta1.ValidatingPolicy" v=0
2026-10-11T01:40:25Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/internal/controller/controller.go:369 > Starting EventSource controller=namespacedvalidatingpolicy controllerGroup=policies.kyverno.io controllerKind=NamespacedValidatingPolicy source="kind source: *v1beta1.NamespacedValidatingPolicy" v=0
2026-10-11T01:40:25Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/internal/controller/controller.go:369 > Starting EventSource controller=imagevalidatingpolicy controllerGroup=policies.kyverno.io controllerKind=ImageValidatingPolicy source="kind source: *v1beta1.ImageValidatingPolicy" v=0
2026-10-11T01:40:25Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/internal/controller/controller.go:369 > Starting EventSource controller=mutatingpolicy controllerGroup=policies.kyverno.io controllerKind=MutatingPolicy source="kind source: *v1beta1.MutatingPolicy" v=0
2026-10-11T01:40:25Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/internal/controller/controller.go:369 > Starting EventSource controller=namespacedimagevalidatingpolicy controllerGroup=policies.kyverno.io controllerKind=NamespacedImageValidatingPolicy source="kind source: *v1beta1.NamespacedImageValidatingPolicy" v=0
2026-10-11T01:40:25Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.Namespace v=2
2026-10-11T01:40:25Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.ClusterRoleBinding v=2
2026-10-11T01:40:25Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.RoleBinding v=2
2026-10-11T01:40:26Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1beta1.NamespacedGeneratingPolicy v=2
2026-10-11T01:40:26Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1beta1.GeneratingPolicy v=2
2026-10-11T01:40:26Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=controller-runtime/cache reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1beta1.NamespacedMutatingPolicy v=2
2026-10-11T01:40:26Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=controller-runtime/cache reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1beta1.NamespacedImageValidatingPolicy v=2
2026-10-11T01:40:26Z INF cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/leaderelection/leaderelection.go:258 > Attempting to acquire leader lease... lock=konflux-kyverno/kyverno logger=klog v=0
2026-10-11T01:40:26Z TRC kyverno/cmd/internal/controller.go:32 > starting controller logger=setup name=kyverno-events v=2 workers=3
2026-10-11T01:40:26Z TRC kyverno/pkg/event/controller.go:125 > start logger=EventGenerator v=2
2026-10-11T01:40:26Z TRC kyverno/cmd/internal/controller.go:32 > starting controller logger=setup name=global-context v=2 workers=1
2026-10-11T01:40:26Z TRC kyverno/cmd/internal/controller.go:32 > starting controller logger=setup/controllers name=policycache-controller v=2 workers=3
2026-10-11T01:40:26Z INF cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/leaderelection/leaderelection.go:272 > Successfully acquired lease lock=konflux-kyverno/kyverno logger=klog v=0
2026-10-11T01:40:26Z TRC kyverno/pkg/leaderelection/leaderelection.go:82 > started leading id=kyverno-admission-controller-68cfc44c4f-wnxwv logger=setup/leader-election v=2
2026-10-11T01:40:26Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=controller-runtime/cache reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1beta1.ValidatingPolicy v=2
2026-10-11T01:40:26Z TRC kyverno/cmd/kyverno/main.go:335 > MutatingAdmissionPolicy API is not registered, skipping MAP informers error="mutating admission policy API is not registered" v=2
2026-10-11T01:40:26Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1beta1.MutatingPolicy v=2
2026-10-11T01:40:26Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.Lease v=2
2026-10-11T01:40:26Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1beta1.PolicyException v=2
2026-10-11T01:40:26Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.MutatingWebhookConfiguration v=2
2026-10-11T01:40:26Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1beta1.ValidatingPolicy v=2
2026-10-11T01:40:26Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.ValidatingAdmissionPolicyBinding v=2
2026-10-11T01:40:26Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1beta1.ImageValidatingPolicy v=2
2026-10-11T01:40:26Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1beta1.NamespacedValidatingPolicy v=2
2026-10-11T01:40:26Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.ValidatingAdmissionPolicy v=2
2026-10-11T01:40:26Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.ValidatingWebhookConfiguration v=2
2026-10-11T01:40:26Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1beta1.NamespacedMutatingPolicy v=2
2026-10-11T01:40:26Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.ClusterRole v=2
2026-10-11T01:40:26Z INF cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/rest/warnings.go:107 > Warning: kyverno.io/v2 PolicyException is deprecated and will be removed in a future release; migrate to PolicyException (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ logger=klog v=0
2026-10-11T01:40:26Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v2.PolicyException v=2
2026-10-11T01:40:26Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1beta1.NamespacedImageValidatingPolicy v=2
2026-10-11T01:40:26Z TRC kyverno/cmd/internal/controller.go:32 > starting controller logger=setup/leader/controllers name=admissionpolicy-generator v=2 workers=2
2026-10-11T01:40:26Z TRC kyverno/pkg/utils/controller/run.go:20 > starting ... logger=admissionpolicy-generator v=2
2026-10-11T01:40:26Z TRC kyverno/cmd/internal/controller.go:32 > starting controller logger=setup/leader/controllers name=certmanager-controller v=2 workers=1
2026-10-11T01:40:26Z TRC kyverno/cmd/internal/controller.go:32 > starting controller logger=setup/leader/controllers name=webhook-controller v=2 workers=2
2026-10-11T01:40:26Z TRC kyverno/cmd/internal/controller.go:32 > starting controller logger=setup/leader/controllers name=exception-webhook-controller v=2 workers=1
2026-10-11T01:40:26Z TRC kyverno/cmd/internal/controller.go:32 > starting controller logger=setup/leader/controllers name=global-context-webhook-controller v=2 workers=1
2026-10-11T01:40:26Z TRC kyverno/cmd/internal/controller.go:32 > starting controller logger=setup/leader/controllers name=status-controller v=2 workers=3
2026-10-11T01:40:26Z TRC kyverno/cmd/internal/controller.go:32 > starting controller logger=setup/leader/controllers name=celexception-webhook-controller v=2 workers=1
2026-10-11T01:40:26Z ERR kyverno/pkg/controllers/webhook/controller.go:464 > failed to get lease error="lease.coordination.k8s.io \"kyverno-health\" not found" logger=webhook-controller
2026-10-11T01:40:26Z ERR kyverno/pkg/controllers/webhook/controller.go:464 > failed to get lease error="lease.coordination.k8s.io \"kyverno-health\" not found" logger=webhook-controller
2026-10-11T01:40:26Z ERR kyverno/pkg/controllers/webhook/controller.go:464 > failed to get lease error="lease.coordination.k8s.io \"kyverno-health\" not found" logger=webhook-controller
2026-10-11T01:40:26Z ERR kyverno/pkg/controllers/webhook/controller.go:464 > failed to get lease error="lease.coordination.k8s.io \"kyverno-health\" not found" logger=webhook-controller
2026-10-11T01:40:26Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=controller-runtime/cache reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1beta1.NamespacedValidatingPolicy v=2
2026-10-11T01:40:26Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=controller-runtime/cache reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1beta1.ImageValidatingPolicy v=2
2026-10-11T01:40:26Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=controller-runtime/cache reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1beta1.MutatingPolicy v=2
2026-10-11T01:40:26Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/internal/controller/controller.go:302 > Starting Controller controller=validatingpolicy controllerGroup=policies.kyverno.io controllerKind=ValidatingPolicy v=0
2026-10-11T01:40:26Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/internal/controller/controller.go:302 > Starting Controller controller=namespacedimagevalidatingpolicy controllerGroup=policies.kyverno.io controllerKind=NamespacedImageValidatingPolicy v=0
2026-10-11T01:40:26Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/internal/controller/controller.go:305 > Starting workers controller=validatingpolicy controllerGroup=policies.kyverno.io controllerKind=ValidatingPolicy v=0 worker count=1
2026-10-11T01:40:26Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/internal/controller/controller.go:305 > Starting workers controller=namespacedimagevalidatingpolicy controllerGroup=policies.kyverno.io controllerKind=NamespacedImageValidatingPolicy v=0 worker count=1
2026-10-11T01:40:26Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/internal/controller/controller.go:302 > Starting Controller controller=namespacedmutatingpolicy controllerGroup=policies.kyverno.io controllerKind=NamespacedMutatingPolicy v=0
2026-10-11T01:40:26Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/internal/controller/controller.go:305 > Starting workers controller=namespacedmutatingpolicy controllerGroup=policies.kyverno.io controllerKind=NamespacedMutatingPolicy v=0 worker count=1
2026-10-11T01:40:26Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/internal/controller/controller.go:302 > Starting Controller controller=namespacedvalidatingpolicy controllerGroup=policies.kyverno.io controllerKind=NamespacedValidatingPolicy v=0
2026-10-11T01:40:26Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/internal/controller/controller.go:302 > Starting Controller controller=mutatingpolicy controllerGroup=policies.kyverno.io controllerKind=MutatingPolicy v=0
2026-10-11T01:40:26Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/internal/controller/controller.go:302 > Starting Controller controller=imagevalidatingpolicy controllerGroup=policies.kyverno.io controllerKind=ImageValidatingPolicy v=0
2026-10-11T01:40:26Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/internal/controller/controller.go:305 > Starting workers controller=namespacedvalidatingpolicy controllerGroup=policies.kyverno.io controllerKind=NamespacedValidatingPolicy v=0 worker count=1
2026-10-11T01:40:26Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/internal/controller/controller.go:305 > Starting workers controller=mutatingpolicy controllerGroup=policies.kyverno.io controllerKind=MutatingPolicy v=0 worker count=1
2026-10-11T01:40:26Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/internal/controller/controller.go:305 > Starting workers controller=imagevalidatingpolicy controllerGroup=policies.kyverno.io controllerKind=ImageValidatingPolicy v=0 worker count=1
2026-10-11T01:44:52Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=adjust-buildah-resources-for-remote-platforms namespace= operation=CREATE uid=fabe4a7a-7b2a-4f3d-8f85-2fca18025d35 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:44:52Z TRC kyverno/pkg/controllers/admissionpolicygenerator/cpol.go:12 > policy created kind=ClusterPolicy logger=admissionpolicy-generator name=adjust-buildah-resources-for-remote-platforms uid=e615d017-297c-4a6d-ab18-9ba3e0fb0761 v=2
2026-10-11T01:44:52Z TRC kyverno/pkg/controllers/generic/logging/controller.go:45 > resource added logger=setup/cluster-policy name=adjust-buildah-resources-for-remote-platforms type=ClusterPolicy v=2
2026-10-11T01:44:52Z INF cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/rest/warnings.go:107 > Warning: kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ logger=klog v=0
2026-10-11T01:44:52Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-rbcm namespace= operation=CREATE uid=fefb26f5-06f5-4090-9760-2854f819deeb user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:44:52Z TRC kyverno/pkg/controllers/admissionpolicygenerator/cpol.go:12 > policy created kind=ClusterPolicy logger=admissionpolicy-generator name=konflux-rbac-bootstrap-tenant-namespace-rbcm uid=8c8d8c6d-1d9a-4d6b-b943-1d84819df5f7 v=2
2026-10-11T01:44:52Z TRC kyverno/pkg/controllers/generic/logging/controller.go:45 > resource added logger=setup/cluster-policy name=konflux-rbac-bootstrap-tenant-namespace-rbcm type=ClusterPolicy v=2
2026-10-11T01:44:52Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-integration namespace= operation=CREATE uid=ea2022d1-9c66-4443-b123-62fe362d5eff user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:44:52Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpmonitoring namespace= operation=CREATE uid=4a11295b-2fb0-4b19-bb7b-54c8aa2857f6 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:44:52Z INF cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/rest/warnings.go:107 > Warning: kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ logger=klog v=0
2026-10-11T01:44:52Z TRC kyverno/pkg/controllers/admissionpolicygenerator/cpol.go:12 > policy created kind=ClusterPolicy logger=admissionpolicy-generator name=init-ns-integration uid=717b6f8d-f073-47bb-8968-75e86bd4ec8d v=2
2026-10-11T01:44:52Z TRC kyverno/pkg/controllers/generic/logging/controller.go:45 > resource added logger=setup/cluster-policy name=init-ns-integration type=ClusterPolicy v=2
2026-10-11T01:44:52Z TRC kyverno/pkg/controllers/generic/logging/controller.go:45 > resource added logger=setup/cluster-policy name=konflux-rbac-bootstrap-tenant-namespace-np-ocpmonitoring type=ClusterPolicy v=2
2026-10-11T01:44:52Z TRC kyverno/pkg/controllers/admissionpolicygenerator/cpol.go:12 > policy created kind=ClusterPolicy logger=admissionpolicy-generator name=konflux-rbac-bootstrap-tenant-namespace-np-ocpmonitoring uid=24c80856-2f26-43d0-bced-78297654aeef v=2
2026-10-11T01:44:52Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress namespace= operation=CREATE uid=82c46d5f-6b0d-4a88-86b4-53f0ef400c55 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:44:52Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace namespace= operation=CREATE uid=c26083a6-6eb9-4587-8ead-2fb0cff6b3c5 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:44:52Z TRC kyverno/pkg/controllers/generic/logging/controller.go:45 > resource added logger=setup/cluster-policy name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress type=ClusterPolicy v=2
2026-10-11T01:44:52Z TRC kyverno/pkg/controllers/admissionpolicygenerator/cpol.go:12 > policy created kind=ClusterPolicy logger=admissionpolicy-generator name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress uid=24502a1f-351a-49d9-84ea-7e2294e648b0 v=2
2026-10-11T01:44:52Z INF cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/rest/warnings.go:107 > Warning: kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ logger=klog v=0
2026-10-11T01:44:52Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-kubearchiveconfig namespace= operation=CREATE uid=e894911b-8228-44a0-980e-9e793439fc04 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:44:52Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-generate-konflux-viewer-access namespace= operation=CREATE uid=32bd638c-fd8c-4ff1-b084-8e87037edf29 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:44:52Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-olm namespace= operation=CREATE uid=4ab350cc-86d7-41a0-a9cf-b626313a78d9 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:44:52Z INF cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/rest/warnings.go:107 > Warning: kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ logger=klog v=0
2026-10-11T01:44:52Z TRC kyverno/pkg/controllers/generic/logging/controller.go:45 > resource added logger=setup/cluster-policy name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace type=ClusterPolicy v=2
2026-10-11T01:44:52Z TRC kyverno/pkg/controllers/admissionpolicygenerator/cpol.go:12 > policy created kind=ClusterPolicy logger=admissionpolicy-generator name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace uid=2f51605c-1266-4f29-b4c4-8f55ace56b36 v=2
2026-10-11T01:44:52Z TRC kyverno/pkg/controllers/admissionpolicygenerator/cpol.go:12 > policy created kind=ClusterPolicy logger=admissionpolicy-generator name=init-ns-kubearchiveconfig uid=142ec286-bcf5-4104-8751-381f3e0b305b v=2
2026-10-11T01:44:52Z TRC kyverno/pkg/controllers/generic/logging/controller.go:45 > resource added logger=setup/cluster-policy name=init-ns-kubearchiveconfig type=ClusterPolicy v=2
2026-10-11T01:44:52Z TRC kyverno/pkg/controllers/admissionpolicygenerator/cpol.go:12 > policy created kind=ClusterPolicy logger=admissionpolicy-generator name=konflux-rbac-generate-konflux-viewer-access uid=d521c492-4e11-48b1-82b9-b2bda93b4a43 v=2
2026-10-11T01:44:52Z TRC kyverno/pkg/controllers/generic/logging/controller.go:45 > resource added logger=setup/cluster-policy name=konflux-rbac-generate-konflux-viewer-access type=ClusterPolicy v=2
2026-10-11T01:44:52Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpconsole namespace= operation=CREATE uid=de1f35e3-e30e-4c72-b756-577f370fa362 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:44:52Z TRC kyverno/pkg/controllers/generic/logging/controller.go:45 > resource added logger=setup/cluster-policy name=konflux-rbac-bootstrap-tenant-namespace-np-olm type=ClusterPolicy v=2
2026-10-11T01:44:52Z TRC kyverno/pkg/controllers/admissionpolicygenerator/cpol.go:12 > policy created kind=ClusterPolicy logger=admissionpolicy-generator name=konflux-rbac-bootstrap-tenant-namespace-np-olm uid=5e62ae27-0aa9-46f8-8c63-c61116e4fc2c v=2
2026-10-11T01:44:52Z TRC kyverno/pkg/controllers/generic/logging/controller.go:45 > resource added logger=setup/cluster-policy name=konflux-rbac-bootstrap-tenant-namespace-np-ocpconsole type=ClusterPolicy v=2
2026-10-11T01:44:52Z TRC kyverno/pkg/controllers/admissionpolicygenerator/cpol.go:12 > policy created kind=ClusterPolicy logger=admissionpolicy-generator name=konflux-rbac-bootstrap-tenant-namespace-np-ocpconsole uid=67c8bd91-b203-4e0e-9b62-161821356851 v=2
2026-10-11T01:44:52Z INF cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/rest/warnings.go:107 > Warning: kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ logger=klog v=0
2026-10-11T01:44:52Z INF cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/rest/warnings.go:107 > Warning: kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ logger=klog v=0
2026-10-11T01:44:52Z INF cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/rest/warnings.go:107 > Warning: kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ logger=klog v=0
2026-10-11T01:44:52Z INF cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/rest/warnings.go:107 > Warning: kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ logger=klog v=0
2026-10-11T01:44:52Z INF cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/rest/warnings.go:107 > Warning: kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ logger=klog v=0
2026-10-11T01:44:52Z INF cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/rest/warnings.go:107 > Warning: kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ logger=klog v=0
2026-10-11T01:44:52Z INF cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/rest/warnings.go:107 > Warning: kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ logger=klog v=0
2026-10-11T01:44:52Z INF cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/rest/warnings.go:107 > Warning: kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ logger=klog v=0
2026-10-11T01:44:52Z INF cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/rest/warnings.go:107 > Warning: kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ logger=klog v=0
2026-10-11T01:44:52Z INF cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/rest/warnings.go:107 > Warning: kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ logger=klog v=0
2026-10-11T01:44:52Z INF cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/rest/warnings.go:107 > Warning: kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ logger=klog v=0
2026-10-11T01:44:53Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-sysauth-releng namespace= operation=CREATE uid=b33b34e5-fce9-486f-b077-a15ec56be5e2 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:44:53Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-system-authenticated namespace= operation=CREATE uid=ecbf9d72-0c85-4c07-bba2-1aef69500df8 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:44:53Z TRC kyverno/pkg/controllers/generic/logging/controller.go:45 > resource added logger=setup/cluster-policy name=konflux-rbac-validate-restrict-binding-sysauth-releng type=ClusterPolicy v=2
2026-10-11T01:44:53Z TRC kyverno/pkg/controllers/admissionpolicygenerator/cpol.go:12 > policy created kind=ClusterPolicy logger=admissionpolicy-generator name=konflux-rbac-validate-restrict-binding-sysauth-releng uid=51bf4491-66cb-4b4f-a074-48f2154706f1 v=2
2026-10-11T01:44:53Z TRC kyverno/pkg/controllers/admissionpolicygenerator/cpol.go:12 > policy created kind=ClusterPolicy logger=admissionpolicy-generator name=konflux-rbac-validate-restrict-binding-system-authenticated uid=f48be888-d2db-438e-a70e-45839c887e48 v=2
2026-10-11T01:44:53Z TRC kyverno/pkg/controllers/generic/logging/controller.go:45 > resource added logger=setup/cluster-policy name=konflux-rbac-validate-restrict-binding-system-authenticated type=ClusterPolicy v=2
2026-10-11T01:44:53Z INF cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/rest/warnings.go:107 > Warning: kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ logger=klog v=0
2026-10-11T01:44:53Z INF cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/rest/warnings.go:107 > Warning: kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ logger=klog v=0
2026-10-11T01:44:53Z INF cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/rest/warnings.go:107 > Warning: kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ logger=klog v=0
2026-10-11T01:44:53Z ERR kyverno/pkg/controllers/admissionpolicygenerator/controller.go:296 > failed to update cluster policy status error="Operation cannot be fulfilled on clusterpolicies.kyverno.io \"konflux-rbac-validate-restrict-binding-sysauth-releng\": the object has been modified; please apply your changes to the latest version and try again" name=konflux-rbac-validate-restrict-binding-sysauth-releng status={"autogen":{},"rulecount":{"generate":0,"mutate":0,"validate":0,"verifyimages":0},"validatingadmissionpolicy":{"generated":false,"message":"skip generating ValidatingAdmissionPolicy for non CEL rules."}}
2026-10-11T01:44:53Z INF cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/rest/warnings.go:107 > Warning: kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ logger=klog v=0
2026-10-11T01:44:53Z ERR kyverno/pkg/controllers/admissionpolicygenerator/controller.go:296 > failed to update cluster policy status error="Operation cannot be fulfilled on clusterpolicies.kyverno.io \"konflux-rbac-validate-restrict-binding-system-authenticated\": the object has been modified; please apply your changes to the latest version and try again" name=konflux-rbac-validate-restrict-binding-system-authenticated status={"autogen":{},"rulecount":{"generate":0,"mutate":0,"validate":0,"verifyimages":0},"validatingadmissionpolicy":{"generated":false,"message":"skip generating ValidatingAdmissionPolicy for non CEL rules."}}
2026-10-11T01:44:53Z INF cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/rest/warnings.go:107 > Warning: kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ logger=klog v=0
2026-10-11T01:44:53Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-binding-system-groups namespace= operation=CREATE uid=dfa66c92-9cc8-4c60-be53-aac8ebfc5d6a user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:44:53Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-docker-io-images namespace= operation=CREATE uid=26f29d34-67b0-4e73-9933-59db12c0e2e9 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:44:53Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=tekton-taskrun-resource-policy namespace= operation=CREATE uid=f3a119b8-5b95-4255-a531-4b683bb20ac8 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:44:53Z TRC kyverno/pkg/controllers/admissionpolicygenerator/cpol.go:12 > policy created kind=ClusterPolicy logger=admissionpolicy-generator name=restrict-binding-system-groups uid=f9d58ab8-81b1-4b52-8f14-0ca1aca91478 v=2
2026-10-11T01:44:53Z TRC kyverno/pkg/controllers/generic/logging/controller.go:45 > resource added logger=setup/cluster-policy name=restrict-binding-system-groups type=ClusterPolicy v=2
2026-10-11T01:44:53Z TRC kyverno/pkg/controllers/admissionpolicygenerator/cpol.go:12 > policy created kind=ClusterPolicy logger=admissionpolicy-generator name=restrict-docker-io-images uid=8c78b21c-cd86-4ddf-b63e-f08b1cd657fa v=2
2026-10-11T01:44:53Z TRC kyverno/pkg/controllers/generic/logging/controller.go:45 > resource added logger=setup/cluster-policy name=restrict-docker-io-images type=ClusterPolicy v=2
2026-10-11T01:44:53Z TRC kyverno/pkg/controllers/admissionpolicygenerator/cpol.go:12 > policy created kind=ClusterPolicy logger=admissionpolicy-generator name=tekton-taskrun-resource-policy uid=6730fa6e-cf27-4a2f-b7fe-7b4d4b66a922 v=2
2026-10-11T01:44:53Z TRC kyverno/pkg/controllers/generic/logging/controller.go:45 > resource added logger=setup/cluster-policy name=tekton-taskrun-resource-policy type=ClusterPolicy v=2
2026-10-11T01:44:53Z INF cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/rest/warnings.go:107 > Warning: kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ logger=klog v=0
2026-10-11T01:44:53Z INF cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/rest/warnings.go:107 > Warning: kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ logger=klog v=0
2026-10-11T01:44:53Z INF cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/rest/warnings.go:107 > Warning: kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ logger=klog v=0
2026-10-11T01:44:53Z INF cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/rest/warnings.go:107 > Warning: kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ logger=klog v=0
2026-10-11T01:44:53Z ERR kyverno/pkg/controllers/admissionpolicygenerator/controller.go:296 > failed to update cluster policy status error="Operation cannot be fulfilled on clusterpolicies.kyverno.io \"restrict-binding-system-groups\": the object has been modified; please apply your changes to the latest version and try again" name=restrict-binding-system-groups status={"autogen":{},"rulecount":{"generate":0,"mutate":0,"validate":0,"verifyimages":0},"validatingadmissionpolicy":{"generated":false,"message":"skip generating ValidatingAdmissionPolicy for non CEL rules."}}
2026-10-11T01:44:53Z ERR kyverno/pkg/controllers/admissionpolicygenerator/controller.go:296 > failed to update cluster policy status error="Operation cannot be fulfilled on clusterpolicies.kyverno.io \"restrict-docker-io-images\": the object has been modified; please apply your changes to the latest version and try again" name=restrict-docker-io-images status={"autogen":{},"rulecount":{"generate":0,"mutate":0,"validate":0,"verifyimages":0},"validatingadmissionpolicy":{"generated":false,"message":"skip generating ValidatingAdmissionPolicy for non CEL rules."}}
2026-10-11T01:44:53Z INF cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/rest/warnings.go:107 > Warning: kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ logger=klog v=0
2026-10-11T01:44:53Z INF cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/rest/warnings.go:107 > Warning: kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ logger=klog v=0
2026-10-11T01:44:54Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=adjust-buildah-resources-for-remote-platforms namespace= operation=UPDATE uid=99f7f55a-e978-4cc6-af80-d8d8605ee558 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:44:54Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-rbcm namespace= operation=UPDATE uid=53aeeb3f-457a-4115-a96e-7306c41d2f6c user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:44:56Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-rbcm namespace= operation=UPDATE uid=363d3d07-f4c6-4f77-9992-ce57aad78bb8 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:44:56Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-integration namespace= operation=UPDATE uid=f69bd757-49a8-4c54-ace1-a3946dabfa23 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:44:56Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=adjust-buildah-resources-for-remote-platforms namespace= operation=UPDATE uid=cc9eed5b-6f29-4053-b25a-15d5e1449c3f user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:44:56Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpmonitoring namespace= operation=UPDATE uid=c2968ade-8895-4f69-8329-b1e761f153f8 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:44:56Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress namespace= operation=UPDATE uid=a5d02570-aaea-46f7-a329-0ac6f7064157 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:44:56Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpmonitoring namespace= operation=UPDATE uid=3c40b279-1b1e-4a42-8225-43ad47f247c4 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:44:56Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=adjust-buildah-resources-for-remote-platforms namespace= operation=UPDATE uid=f9f16f57-6ada-4b71-a2fd-4260f3c7989a user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:44:56Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress namespace= operation=UPDATE uid=183797c1-0488-4609-ae51-dfc1960fded7 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:44:56Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-integration namespace= operation=UPDATE uid=4c95e43f-856c-41cf-9536-df68602188ed user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:44:56Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-rbcm namespace= operation=UPDATE uid=8915e8f7-bf60-4ac5-aca9-9c954209cfb1 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:44:58Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-integration namespace= operation=UPDATE uid=1c488984-cf99-4fee-8bd4-e6438aa83d4c user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:44:58Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-kubearchiveconfig namespace= operation=UPDATE uid=2511a8d4-a69b-4c63-9a9b-0bff7f70428a user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:44:58Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace namespace= operation=UPDATE uid=b8b6ddd4-dd89-4778-9d9a-5fded9d7b4a0 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:44:58Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=adjust-buildah-resources-for-remote-platforms namespace= operation=UPDATE uid=9cc5359d-b911-4e3a-97c5-8a4449467bde user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:44:58Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-integration namespace= operation=UPDATE uid=3e19dbc6-61f0-4c39-8ac6-117b18d46b22 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:44:58Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-olm namespace= operation=UPDATE uid=fea809c6-2375-415a-9492-b3cc9994d156 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:44:58Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-kubearchiveconfig namespace= operation=UPDATE uid=3037fbdc-9e82-4e4b-9093-ceac0319ddbd user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:44:58Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=adjust-buildah-resources-for-remote-platforms namespace= operation=UPDATE uid=79aa4672-e7d4-4d31-a0db-f6d616660b2b user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:44:58Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-olm namespace= operation=UPDATE uid=b59d6758-a83d-42fd-adec-02387dba24db user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:44:58Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress namespace= operation=UPDATE uid=c4ae1af1-6f19-4df0-a253-17c59b36bb11 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:44:58Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace namespace= operation=UPDATE uid=abc98309-1f78-4c25-b39d-e8a3e231a29d user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:44:58Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpconsole namespace= operation=UPDATE uid=0e786e4f-d639-4baa-96d6-9828ddd3ee02 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:44:58Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress namespace= operation=UPDATE uid=6cdc0d5d-8239-47dc-bbfa-1fd2b360b68c user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:44:58Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpmonitoring namespace= operation=UPDATE uid=4b9597b9-44af-4e1d-b826-7b9d025209da user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:44:58Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-generate-konflux-viewer-access namespace= operation=UPDATE uid=4008e487-3b85-47f6-9e7b-e3cf868648f9 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:44:58Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-rbcm namespace= operation=UPDATE uid=74f899a2-8b46-4b60-905e-426956984495 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:44:58Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpconsole namespace= operation=UPDATE uid=c1813611-73ad-4eff-bb8d-18c1951bc5c0 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:44:58Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-generate-konflux-viewer-access namespace= operation=UPDATE uid=ed6b2918-388f-4520-93bc-6b7605887b5a user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:44:58Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-rbcm namespace= operation=UPDATE uid=422620bb-c9b8-4233-80ed-88400f860204 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:44:58Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpmonitoring namespace= operation=UPDATE uid=b5601e47-c114-457d-883c-72571fe519ef user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:45:00Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:controller:cronjob-controller","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-result-read-role"] gvk="batch/v1, Kind=Job" gvr="batch/v1, Resource=jobs" kind=Job logger=webhooks/resource/validate name=pipelines-vacuum-29861385 namespace=product-kubearchive operation=CREATE policy=restrict-docker-io-images resource=product-kubearchive/Job/pipelines-vacuum-29861385 resource.gvk="batch/v1, Kind=Job" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=bc834690-34fe-4b2e-9689-abc57a0e0e74 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4914fd7e-06ec-417e-b4d6-792978196916"]},"groups":["system:serviceaccounts","system:serviceaccounts:kube-system","system:authenticated"],"uid":"d8ec0be1-331c-458c-81a5-11e64906e9e1","username":"system:serviceaccount:kube-system:cronjob-controller"} v=2
2026-10-11T01:45:00Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:controller:job-controller","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=pipelines-vacuum-29861385-gbxw2 namespace=product-kubearchive operation=CREATE policy=restrict-docker-io-images resource=product-kubearchive/Pod/pipelines-vacuum-29861385-gbxw2 resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=e7ff6b23-b96d-4335-be52-a11704839bf4 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=7a1372d8-0c45-4942-8de0-1fe6ae563046"]},"groups":["system:serviceaccounts","system:serviceaccounts:kube-system","system:authenticated"],"uid":"aea9b2ff-bed1-48a1-83ca-795d4f838877","username":"system:serviceaccount:kube-system:job-controller"} v=2
2026-10-11T01:45:00Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-olm namespace= operation=UPDATE uid=0540916d-e277-47da-9858-159b483ba9fb user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:45:00Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-generate-konflux-viewer-access namespace= operation=UPDATE uid=b5df1843-47a6-4e92-b866-d635cbefa742 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:45:00Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=adjust-buildah-resources-for-remote-platforms namespace= operation=UPDATE uid=8943cdab-ca47-42d6-9cde-e9ecde9d2983 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:45:00Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-integration namespace= operation=UPDATE uid=f5ad06a4-210b-4eae-bc0c-07664f856795 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:45:00Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-kubearchiveconfig namespace= operation=UPDATE uid=929dfe08-f9c8-4108-84a4-5f44912e2a74 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:45:00Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-rbcm namespace= operation=UPDATE uid=782cd149-d547-4a73-8738-59cb1dcf679f user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:45:00Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-integration namespace= operation=UPDATE uid=bdb7f664-b6e7-4033-8c82-4be48c7af5b0 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:45:00Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress namespace= operation=UPDATE uid=6feb8e3e-d142-49a0-95d6-e07fe7294a45 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:45:00Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpconsole namespace= operation=UPDATE uid=27c537a5-efd1-4127-b481-70268ea69635 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:45:00Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-rbcm namespace= operation=UPDATE uid=7b006ce9-92e9-4cc1-9460-f27920e1aae1 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:45:00Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpmonitoring namespace= operation=UPDATE uid=bf49e315-51c5-4902-b686-7860182a3343 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:45:00Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-generate-konflux-viewer-access namespace= operation=UPDATE uid=65d0e5b5-88a7-4abc-accd-79ba8ed00d80 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:45:00Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=adjust-buildah-resources-for-remote-platforms namespace= operation=UPDATE uid=e69919ed-b2c1-4d4f-8c60-2ce77a58913f user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:45:00Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress namespace= operation=UPDATE uid=ba33b057-c2cf-4ab3-81a0-758a679c38eb user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:45:00Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace namespace= operation=UPDATE uid=7c61ccae-0756-4f4d-8b0d-cf964c522721 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:45:00Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-olm namespace= operation=UPDATE uid=c7288cee-7177-404d-ae14-d63d29f0baf6 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:45:00Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace namespace= operation=UPDATE uid=78879b3d-48aa-4c3d-8bd8-b9222c6e48c7 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:45:00Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-kubearchiveconfig namespace= operation=UPDATE uid=022a2dad-bef0-4fe9-ab15-2e09b35b8bc5 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:45:00Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpconsole namespace= operation=UPDATE uid=13b78887-34d5-4f2f-a36a-241298210d20 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:45:00Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpmonitoring namespace= operation=UPDATE uid=c8aee43b-dee7-4a0f-8fd8-8dcc35dde40f user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:45:02Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=adjust-buildah-resources-for-remote-platforms namespace= operation=UPDATE uid=b008d857-5075-4e6d-8976-28ee113a6f9a user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:45:02Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-generate-konflux-viewer-access namespace= operation=UPDATE uid=843164ac-81f8-421d-8e08-eda2e7005f58 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:45:02Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-integration namespace= operation=UPDATE uid=2df6de43-c6a7-45fa-8d39-13be5ec45b66 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:45:02Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace namespace= operation=UPDATE uid=da1a2eb6-25ed-4fc5-a280-d1bc804b4e6c user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:45:02Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-kubearchiveconfig namespace= operation=UPDATE uid=9ebf6dc6-f5b0-4ddb-8cd8-024a432be9a2 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:45:02Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpconsole namespace= operation=UPDATE uid=8da48b67-2dfe-431a-82e9-f08dad9f77ab user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:45:02Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-integration namespace= operation=UPDATE uid=af3242e8-52f2-4a46-a59b-f050db29a171 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:45:02Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-sysauth-releng namespace= operation=UPDATE uid=e93e7348-0cbf-4f04-a023-58e8246539db user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:45:02Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpmonitoring namespace= operation=UPDATE uid=6cc5f63c-37f5-4b96-9213-088793a0840d user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:45:02Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-sysauth-releng namespace= operation=UPDATE uid=d04b2bb0-fb01-44d9-b39e-956b417d1f10 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:45:02Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-system-authenticated namespace= operation=UPDATE uid=647edacd-bc68-4663-94f8-7485cd212821 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:45:02Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-generate-konflux-viewer-access namespace= operation=UPDATE uid=cb78fa7f-36af-4074-aa26-33aaf799dedc user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:45:02Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-kubearchiveconfig namespace= operation=UPDATE uid=967345f1-c970-477b-9816-6c2bb6e935e2 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:45:02Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress namespace= operation=UPDATE uid=b25782ae-867f-4c50-829c-ebb1a4c696c1 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:45:02Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpconsole namespace= operation=UPDATE uid=2321328a-4206-4e4e-a84a-2a96c6a7b730 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:45:02Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-rbcm namespace= operation=UPDATE uid=cc45c0cf-b965-4a69-a0b6-6f1f62b12401 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:45:02Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-rbcm namespace= operation=UPDATE uid=aaabc5cb-f14f-4b82-abc5-20383bae1aae user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:45:03Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-olm namespace= operation=UPDATE uid=7dadc3eb-8d9a-48eb-b608-3d94cf13f634 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:45:03Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress namespace= operation=UPDATE uid=d58d09b3-981e-49d5-b698-527f2625620e user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:45:03Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-system-authenticated namespace= operation=UPDATE uid=4feea5ee-cb01-4656-bfca-6d2389d6620b user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:45:03Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=adjust-buildah-resources-for-remote-platforms namespace= operation=UPDATE uid=54e374cd-54a8-4710-98d7-155f7228736e user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:45:03Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-olm namespace= operation=UPDATE uid=df81db79-ea48-4a1d-80ae-b1d4fdc26537 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:45:03Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpmonitoring namespace= operation=UPDATE uid=6eeb2ed2-0270-4bac-8cf0-12aea7086e7c user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:45:03Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace namespace= operation=UPDATE uid=6e1085f5-30e9-4c1c-90ac-5e4b5fbfe17f user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:45:04Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-system-authenticated namespace= operation=UPDATE uid=5c96499b-2bc5-4be2-b2e7-15cd08110d93 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:45:04Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-docker-io-images namespace= operation=UPDATE uid=8969a799-3f3c-43df-b333-9de908a5555a user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:45:04Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-integration namespace= operation=UPDATE uid=22b448cb-45ff-4f98-8860-9ceffbaa6cd0 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:45:04Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpconsole namespace= operation=UPDATE uid=bc53624b-d791-41d8-ab25-73844df4a5ca user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:45:04Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress namespace= operation=UPDATE uid=4e7e2a91-8d19-4c5a-9467-31cc1e074b58 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:45:04Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace namespace= operation=UPDATE uid=652f30d5-d30c-4e29-9a76-a97d58011966 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:45:04Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpmonitoring namespace= operation=UPDATE uid=e79ee194-4ef2-472b-aba9-8ee2ab4b17ae user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:45:04Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-kubearchiveconfig namespace= operation=UPDATE uid=b780d8a9-fa51-47fa-8d5b-e95b211d522c user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:45:04Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-rbcm namespace= operation=UPDATE uid=e4f7eb28-3a7a-40e2-ac14-003b36d0791b user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:45:04Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=adjust-buildah-resources-for-remote-platforms namespace= operation=UPDATE uid=b26321cd-2464-4faa-b315-59a94426cee4 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:45:04Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-rbcm namespace= operation=UPDATE uid=00bf5694-8685-462d-b3b4-0efc1844a027 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:45:04Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-generate-konflux-viewer-access namespace= operation=UPDATE uid=d38df289-5064-4810-b774-ba8c2d278baa user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:45:04Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-binding-system-groups namespace= operation=UPDATE uid=bebfb131-3db9-4686-aaba-694885d07ea8 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:45:04Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-generate-konflux-viewer-access namespace= operation=UPDATE uid=5555f826-1a29-4162-a54f-ec53d2ab50f0 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:45:04Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-olm namespace= operation=UPDATE uid=cf9c7a6f-f889-484c-ba20-a5f4f1dd83c9 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:45:04Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-integration namespace= operation=UPDATE uid=7e3ca53b-8037-40d0-9b9e-f66f62a1b861 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:45:04Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace namespace= operation=UPDATE uid=093439ad-0067-4e19-a595-12e5244a68cd user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:45:04Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-sysauth-releng namespace= operation=UPDATE uid=8020b656-7cd6-4e89-bf2c-3f5e3d4926dd user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:45:04Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=tekton-taskrun-resource-policy namespace= operation=UPDATE uid=c4a9937a-1b85-4280-ba80-839533590970 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:45:04Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-system-authenticated namespace= operation=UPDATE uid=de565b49-9412-4a61-bb25-ed07193715a5 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:45:04Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress namespace= operation=UPDATE uid=60613824-3e4b-46b5-8fdb-715491a6251f user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:45:04Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpmonitoring namespace= operation=UPDATE uid=08c12a36-bf26-4a36-8e19-1af330660468 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:45:04Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-kubearchiveconfig namespace= operation=UPDATE uid=0bf0c647-100f-48fe-a5f3-3d3bf9277d01 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:45:04Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-sysauth-releng namespace= operation=UPDATE uid=f795752d-f29c-4a38-8f17-6f080e2bb0f9 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:45:04Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-binding-system-groups namespace= operation=UPDATE uid=c2a017df-7350-4b53-a436-9fbb361796f4 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:45:05Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-docker-io-images namespace= operation=UPDATE uid=3859d60b-4512-45ba-b651-b6d56593722d user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:45:05Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=tekton-taskrun-resource-policy namespace= operation=UPDATE uid=1318aae9-23af-459b-bfee-662147c761c9 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:45:05Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=adjust-buildah-resources-for-remote-platforms namespace= operation=UPDATE uid=60bc9858-697a-4a38-8960-c6ade40743e1 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:45:05Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpconsole namespace= operation=UPDATE uid=ee7dfa91-85c0-4c57-88d6-99f67de1d0fc user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:45:05Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-olm namespace= operation=UPDATE uid=548717d1-cd19-4906-b34d-f2de14a0186a user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:45:06Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=tekton-taskrun-resource-policy namespace= operation=UPDATE uid=253217cd-4e03-4dfe-8d03-cfc9fc018ad1 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:45:06Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress namespace= operation=UPDATE uid=89040efe-3b8e-4c54-aae7-34d4c3658a03 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:45:06Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-rbcm namespace= operation=UPDATE uid=f6ce0e8d-dd92-473d-8df2-6f6501431aa3 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:45:06Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-binding-system-groups namespace= operation=UPDATE uid=aec9f22b-c07e-45f2-83f3-fbea4c0dd0d9 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:45:06Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress namespace= operation=UPDATE uid=d4ab3694-e8f6-4b96-b278-ff08105f67c9 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:45:06Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-docker-io-images namespace= operation=UPDATE uid=cb224c26-2171-429d-a5a0-26d4e1682289 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:45:06Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=tekton-taskrun-resource-policy namespace= operation=UPDATE uid=a43f322a-fc99-4341-b608-2dabe1a39332 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:45:06Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-kubearchiveconfig namespace= operation=UPDATE uid=eb806478-bcea-410b-a726-a2c4fe6e4109 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:45:06Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-olm namespace= operation=UPDATE uid=70daf8bb-4f94-4927-bf7b-7ba34d3cdbb7 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:45:06Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-integration namespace= operation=UPDATE uid=3e74a1d6-23f2-4182-955a-e59aa950c5f6 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:45:06Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace namespace= operation=UPDATE uid=4a130d6e-4138-4660-b5e1-dbb5c9ede496 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:45:06Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-kubearchiveconfig namespace= operation=UPDATE uid=b695dab5-c94b-451e-b2d5-2f47d68414b8 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:45:06Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-docker-io-images namespace= operation=UPDATE uid=c7990075-ff64-4ac1-a93c-ed5561295cb1 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:45:06Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-olm namespace= operation=UPDATE uid=c6694b27-5307-44a0-adbf-19640cd9d3f0 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:45:06Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-system-authenticated namespace= operation=UPDATE uid=8247c2de-0c0d-4062-90a3-dad19fbe2482 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:45:06Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpconsole namespace= operation=UPDATE uid=3a3b77a2-4ddc-4106-93c7-001d88fe8e98 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:45:06Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=adjust-buildah-resources-for-remote-platforms namespace= operation=UPDATE uid=6f91e9b2-bba2-4a42-82cb-518ee620ecc2 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:45:06Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace namespace= operation=UPDATE uid=3e87dc56-5efc-47bd-b5a9-12dbaab4a88b user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:45:06Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpconsole namespace= operation=UPDATE uid=f08cab98-0852-4df0-8f73-991f7691a627 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:45:06Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-rbcm namespace= operation=UPDATE uid=e7056ef8-5c65-4cc0-9e22-b5b7a8de381c user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:45:06Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-generate-konflux-viewer-access namespace= operation=UPDATE uid=739fa725-9bad-40e2-804e-bcc0ac5da9de user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:45:07Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-integration namespace= operation=UPDATE uid=cb1cc4d5-7263-4728-a507-aba9a8b2e313 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:45:07Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpmonitoring namespace= operation=UPDATE uid=59696f97-cec3-4381-a12a-4e55b39ba403 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:45:07Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpmonitoring namespace= operation=UPDATE uid=51db3c43-5af6-48aa-a51b-134bd9e35213 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:45:07Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-sysauth-releng namespace= operation=UPDATE uid=6092c5a5-2eea-4fca-a8a1-0b1ebf66c9af user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:45:07Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-sysauth-releng namespace= operation=UPDATE uid=ca028664-6bdb-4796-8065-85904f79910f user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:45:07Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-system-authenticated namespace= operation=UPDATE uid=841e46ac-92b8-4057-832b-8f2980202e48 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:45:07Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-binding-system-groups namespace= operation=UPDATE uid=0bbed8e4-7578-4519-a9b9-5eb98a649c1e user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:45:07Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-generate-konflux-viewer-access namespace= operation=UPDATE uid=00fc2b17-450d-4908-9e47-8e319d7b7e42 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:45:07Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=adjust-buildah-resources-for-remote-platforms namespace= operation=UPDATE uid=c7e7d665-edf4-4cec-b74e-4e13fbcef8d7 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:45:08Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace namespace= operation=UPDATE uid=e85d6c2a-e136-4133-bd46-41fec84a0f09 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:45:08Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-rbcm namespace= operation=UPDATE uid=77097727-ad68-42bd-ad19-ae4d2d58048c user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:45:08Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-binding-system-groups namespace= operation=UPDATE uid=386d3f1c-e1f6-4c2c-8f0c-78cf32b61b02 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:45:08Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-docker-io-images namespace= operation=UPDATE uid=33ccc699-eff2-436c-8336-2e77a7099415 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:45:08Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-integration namespace= operation=UPDATE uid=460bb9f9-03ec-485f-aad7-8fb7b6f4d704 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:45:08Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpconsole namespace= operation=UPDATE uid=c982328f-c53d-49d9-b4e7-8fd9c193f01d user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:45:08Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress namespace= operation=UPDATE uid=b23a0e26-0aa4-48a7-a131-b74c721169b1 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:45:08Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-olm namespace= operation=UPDATE uid=bbf4de4c-7d78-4e6c-a594-1ee290f74ebe user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:45:09Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-kubearchiveconfig namespace= operation=UPDATE uid=1c1e8386-041b-4c68-ae1b-b5b15d674c12 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:45:09Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpmonitoring namespace= operation=UPDATE uid=a33b728e-3b6f-4bc8-bf6c-127fc4ea9211 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:45:09Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-generate-konflux-viewer-access namespace= operation=UPDATE uid=c06e4865-6a7b-4bdb-9246-070aac78cd82 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:45:09Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=adjust-buildah-resources-for-remote-platforms namespace= operation=UPDATE uid=fefd729e-fa78-4db2-a869-94575752203d user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:45:09Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-sysauth-releng namespace= operation=UPDATE uid=262c2a8c-ebd5-48ec-9b65-956ddad0a9d4 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:45:09Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-system-authenticated namespace= operation=UPDATE uid=354f3b4f-eba6-4396-aae2-c14e3de85c89 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:45:09Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=tekton-taskrun-resource-policy namespace= operation=UPDATE uid=aec7c37e-633d-47bd-8024-f7aeed4cd654 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:45:09Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=adjust-buildah-resources-for-remote-platforms namespace= operation=UPDATE uid=cf55e664-35ea-43a2-9155-d5af07fdc194 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:45:09Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress namespace= operation=UPDATE uid=24db6e1a-54c2-4ec1-8fd2-1f65fd94f461 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:45:09Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-kubearchiveconfig namespace= operation=UPDATE uid=643fde31-221c-4ce8-80f4-f72159392dda user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:45:09Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace namespace= operation=UPDATE uid=f6ffe9a4-b16f-48cf-b3d2-e8a1b69426c2 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:45:09Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=tekton-taskrun-resource-policy namespace= operation=UPDATE uid=9036207c-383a-485c-b5bd-df3d8a75891e user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:45:09Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-rbcm namespace= operation=UPDATE uid=996fa11f-4ca3-41d9-b8d3-3c2749fd70ac user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:45:09Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-generate-konflux-viewer-access namespace= operation=UPDATE uid=5703734b-8b92-4ea7-9ba4-0eac6088b197 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:45:09Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-binding-system-groups namespace= operation=UPDATE uid=9106c1f1-e87a-492e-8c72-cb418e0a2f2f user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:45:10Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-sysauth-releng namespace= operation=UPDATE uid=8abd12b4-134e-4dc6-b070-e63a1b145905 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:45:10Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-docker-io-images namespace= operation=UPDATE uid=85a56abf-c4c9-4f13-9af4-553da11dcecf user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:45:10Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-integration namespace= operation=UPDATE uid=156dd0e2-b787-4408-a6f9-e72e9291b7e0 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:45:10Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpconsole namespace= operation=UPDATE uid=cae1292a-c367-44c7-bcd8-d1d25349f9ea user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:45:10Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpmonitoring namespace= operation=UPDATE uid=0b098669-06bd-446b-b860-8210827efdd1 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:45:10Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-olm namespace= operation=UPDATE uid=450aa775-596a-49ec-b758-3b708935eec4 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:45:10Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-system-authenticated namespace= operation=UPDATE uid=d13882bd-46a5-4080-916b-bfcab1e464ee user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:45:12Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:controller:job-controller","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=pipelines-vacuum-29861385-dxdmb namespace=product-kubearchive operation=CREATE policy=restrict-docker-io-images resource=product-kubearchive/Pod/pipelines-vacuum-29861385-dxdmb resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=29147a0f-aff7-4e9e-997b-dac5d00c9fa8 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=7a1372d8-0c45-4942-8de0-1fe6ae563046"]},"groups":["system:serviceaccounts","system:serviceaccounts:kube-system","system:authenticated"],"uid":"aea9b2ff-bed1-48a1-83ca-795d4f838877","username":"system:serviceaccount:kube-system:job-controller"} v=2
2026-10-11T01:45:26Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-system-authenticated namespace= operation=UPDATE uid=d5ba2da7-9045-4d40-9405-8b7fe4ff525f user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:45:26Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-binding-system-groups namespace= operation=UPDATE uid=c8eeea4c-f846-48cb-88d2-f0980c38a96d user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:45:26Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-docker-io-images namespace= operation=UPDATE uid=9d9a9f9c-c70a-48a6-ae06-a5f1f93de7a9 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:45:26Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=tekton-taskrun-resource-policy namespace= operation=UPDATE uid=833d7557-6abf-457c-8d5a-867993641cc0 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:45:26Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-rbcm namespace= operation=UPDATE uid=af52d89e-3150-4053-979b-c3ddbfc1a361 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:45:26Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpconsole namespace= operation=UPDATE uid=9ac8e54f-c08c-49e1-85f9-d955d5c6ae87 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:45:26Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress namespace= operation=UPDATE uid=809cd05c-2da7-4410-8f00-6c6726fc9375 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:45:26Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpmonitoring namespace= operation=UPDATE uid=55c4f5fb-dd66-44de-b0ef-4026597ba3e0 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:45:27Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=adjust-buildah-resources-for-remote-platforms namespace= operation=UPDATE uid=9b1f91b9-cbcb-4ec3-8e19-ebaba3547045 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:45:27Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-olm namespace= operation=UPDATE uid=121bd8c7-2ade-4cb1-b744-099297444897 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:45:27Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace namespace= operation=UPDATE uid=69c50712-a29b-47dc-a39f-4a82fb5bc028 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:45:27Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-generate-konflux-viewer-access namespace= operation=UPDATE uid=816c85cb-e42a-49dd-838a-41f6ec4441dd user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:45:27Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-sysauth-releng namespace= operation=UPDATE uid=da09f9a5-7c81-4369-a955-5a29213809ef user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:45:27Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-integration namespace= operation=UPDATE uid=c34f7d2e-32d0-4ed0-8c40-b41314925c39 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:45:27Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-kubearchiveconfig namespace= operation=UPDATE uid=6bf29d2a-ce49-4541-b76a-1795e020a00a user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:45:29Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-integration namespace= operation=UPDATE uid=2759f8aa-99ac-4ab7-81e2-6cc5a685eee9 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:45:29Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-kubearchiveconfig namespace= operation=UPDATE uid=d26b698e-e984-4ec6-981b-05924131cd4c user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:45:29Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-generate-konflux-viewer-access namespace= operation=UPDATE uid=2b4c6d03-b7bb-4155-8258-68b036951fc4 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:45:29Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-binding-system-groups namespace= operation=UPDATE uid=7af7b570-1609-4410-be94-e4071a91254c user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:45:29Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress namespace= operation=UPDATE uid=7885be5e-e638-4e4e-bd83-8a9f50fd8ea1 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:45:29Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpmonitoring namespace= operation=UPDATE uid=cbd701ab-c300-4c80-8b2a-1d33cad063b2 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:45:29Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-docker-io-images namespace= operation=UPDATE uid=12916667-ff4c-4e89-9207-16e5300b2332 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:45:29Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpmonitoring namespace= operation=UPDATE uid=cf603c9d-247b-4a76-b486-0d59e7f16a53 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:45:29Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-generate-konflux-viewer-access namespace= operation=UPDATE uid=274c2482-2070-4609-a2cc-4632f6ae2628 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:45:29Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=adjust-buildah-resources-for-remote-platforms namespace= operation=UPDATE uid=f2efa2a5-ecc8-4733-9497-249b80038194 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:45:29Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-sysauth-releng namespace= operation=UPDATE uid=56a36cdf-bd55-44af-9b6b-9456255c85fb user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:45:29Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-system-authenticated namespace= operation=UPDATE uid=98565a93-9b12-4b90-a550-ba6f09ae30aa user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:45:29Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress namespace= operation=UPDATE uid=f16eca4d-a85f-4c8a-86de-ec8940db502c user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:45:29Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-olm namespace= operation=UPDATE uid=4eeb7875-6c37-4f3c-bdda-e5d7b57086b9 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:45:30Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace namespace= operation=UPDATE uid=81fa2cdc-18d0-42e5-8d4c-ebab7f6be2cc user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:45:30Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-rbcm namespace= operation=UPDATE uid=2535c4cd-c56d-4663-ae84-161355826fca user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:45:30Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=tekton-taskrun-resource-policy namespace= operation=UPDATE uid=11b210d7-a1fd-499e-9751-0e13c7ce8a99 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:45:30Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpconsole namespace= operation=UPDATE uid=5c3e544b-f651-4cb2-952d-efca8580f073 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:45:30Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace namespace= operation=UPDATE uid=f00f77d9-b9ca-49cf-ba58-08ae990ec46a user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:45:30Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-olm namespace= operation=UPDATE uid=13e02a65-98bd-4e15-9d3d-4fa7dca2b4e1 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:45:30Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-binding-system-groups namespace= operation=UPDATE uid=c45dbc46-3f15-4dd6-9e50-14320c6d31a2 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:45:30Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=tekton-taskrun-resource-policy namespace= operation=UPDATE uid=209e8265-69dc-4161-8bc5-60240b89a026 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:45:30Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpconsole namespace= operation=UPDATE uid=98923626-9bc9-4e4a-bbc5-91baa731eeff user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:45:30Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-rbcm namespace= operation=UPDATE uid=7883b0c2-e0d4-44e8-813b-319d0da484c3 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:45:30Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=adjust-buildah-resources-for-remote-platforms namespace= operation=UPDATE uid=4b275192-5ec3-416d-a1d5-490a3f8eeb8b user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:45:30Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-sysauth-releng namespace= operation=UPDATE uid=8eed7f2d-6bf7-4b24-bd4e-be2303170566 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:45:30Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-docker-io-images namespace= operation=UPDATE uid=b7640415-aea9-4bb5-a06a-aea0fc05b4ce user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:45:30Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-system-authenticated namespace= operation=UPDATE uid=bba9cb57-9088-4405-bc95-ee48d3135221 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:45:30Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-kubearchiveconfig namespace= operation=UPDATE uid=58dc320d-0f7d-47e9-830a-623ea6588ca1 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:45:30Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-integration namespace= operation=UPDATE uid=115b0c26-a5fd-4611-a02f-6569a6b633e5 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:45:30Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=bootstrap-tenant-namespace-queue namespace= operation=CREATE uid=88ea3efe-751d-41b5-89e9-7679e21ace41 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:45:30Z TRC kyverno/pkg/controllers/admissionpolicygenerator/cpol.go:12 > policy created kind=ClusterPolicy logger=admissionpolicy-generator name=bootstrap-tenant-namespace-queue uid=5b288797-a091-4dd0-ae8b-adaa57c31e44 v=2
2026-10-11T01:45:30Z TRC kyverno/pkg/controllers/generic/logging/controller.go:45 > resource added logger=setup/cluster-policy name=bootstrap-tenant-namespace-queue type=ClusterPolicy v=2
2026-10-11T01:45:30Z INF cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/rest/warnings.go:107 > Warning: kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ logger=klog v=0
2026-10-11T01:45:31Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-olm namespace= operation=UPDATE uid=11edb334-57ed-4827-8ad7-a955e6efba45 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:45:31Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=tekton-taskrun-resource-policy namespace= operation=UPDATE uid=049efc6c-2906-4636-974b-9121a46a54cc user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:45:31Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpconsole namespace= operation=UPDATE uid=4e438348-f01b-4e23-a38d-94ab33a9bf57 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:45:31Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress namespace= operation=UPDATE uid=105bcec4-0cc5-4a7f-8d0e-18f0bdf872a8 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:45:31Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-sysauth-releng namespace= operation=UPDATE uid=8c1e675e-0d97-4521-8faa-b6e4518e9387 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:45:31Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-system-authenticated namespace= operation=UPDATE uid=3727f062-9c2e-4f52-952e-1378751e6ec2 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:45:32Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpmonitoring namespace= operation=UPDATE uid=0cd36981-6c67-4e64-a463-4261cd4300d2 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:45:32Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-integration namespace= operation=UPDATE uid=ae8b4063-492d-4f12-ab7f-7042cfb53ba8 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:45:32Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace namespace= operation=UPDATE uid=4f344992-2989-482d-b767-c3b6405f327a user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:45:32Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-generate-konflux-viewer-access namespace= operation=UPDATE uid=6751d043-564b-48d2-a5a5-76985970d3f0 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:45:32Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-docker-io-images namespace= operation=UPDATE uid=af1d6068-cd5e-4ad6-8f08-409cba885916 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:45:32Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=adjust-buildah-resources-for-remote-platforms namespace= operation=UPDATE uid=e2088cac-5773-4b37-8e82-1c0dcd3e17cd user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:45:32Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-binding-system-groups namespace= operation=UPDATE uid=49dd8885-f601-42b4-bc6e-f9d43b5b81f7 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:45:32Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-rbcm namespace= operation=UPDATE uid=9a39f86f-ea30-4a77-a9a5-e0a759fa15c3 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:45:32Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-kubearchiveconfig namespace= operation=UPDATE uid=87d5a7f8-a546-4d13-ae74-6989912006e8 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:45:33Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:controller:job-controller","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=pipelines-vacuum-29861385-cfprx namespace=product-kubearchive operation=CREATE policy=restrict-docker-io-images resource=product-kubearchive/Pod/pipelines-vacuum-29861385-cfprx resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=cc911d09-167b-4a1c-a440-012fbdbaa4e5 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=7a1372d8-0c45-4942-8de0-1fe6ae563046"]},"groups":["system:serviceaccounts","system:serviceaccounts:kube-system","system:authenticated"],"uid":"aea9b2ff-bed1-48a1-83ca-795d4f838877","username":"system:serviceaccount:kube-system:job-controller"} v=2
2026-10-11T01:45:34Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-kubearchiveconfig namespace= operation=UPDATE uid=a5780079-78ab-4ee5-91e1-dbdeb9637cdb user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:45:34Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpmonitoring namespace= operation=UPDATE uid=e67f5f6a-1c42-4fd4-a6c7-22665edca12f user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:45:34Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace namespace= operation=UPDATE uid=99237a18-cc13-4f92-8625-984a851c7ffb user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:45:34Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-binding-system-groups namespace= operation=UPDATE uid=97ee716d-8fe3-4d3e-92b0-2fd4461a529d user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:45:34Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-docker-io-images namespace= operation=UPDATE uid=f64784a5-a54f-44e8-a9ce-dc1c29d0d53c user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:45:34Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-integration namespace= operation=UPDATE uid=49af595f-a6d0-4bcc-bfbd-b8a76eab5d28 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:45:34Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=bootstrap-tenant-namespace-queue namespace= operation=UPDATE uid=06a046c9-f6d4-41a3-8194-73a6259df203 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:45:34Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpconsole namespace= operation=UPDATE uid=6bfe54ad-f0b3-4e06-a435-7162d1d3eda9 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:45:34Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress namespace= operation=UPDATE uid=122d5600-cdc0-4bc8-9be2-595d85d66e0c user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:45:34Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-rbcm namespace= operation=UPDATE uid=cd341ce1-8fc0-4d6a-8f64-0a8b5ccb8b74 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:45:34Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-generate-konflux-viewer-access namespace= operation=UPDATE uid=50e969f6-bd30-4e50-9146-714b00231de9 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:45:34Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=adjust-buildah-resources-for-remote-platforms namespace= operation=UPDATE uid=b53a69c0-a6b3-438c-8b0a-d3b1dc2df9b6 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:45:34Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-system-authenticated namespace= operation=UPDATE uid=be732309-c93d-4faa-abd3-0f4d5a93c754 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:45:34Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=tekton-taskrun-resource-policy namespace= operation=UPDATE uid=8f235994-7eca-4ffe-8724-db35fc603382 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:45:34Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-olm namespace= operation=UPDATE uid=bf264917-7146-49be-ba8f-1e9bd58049ad user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:45:34Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-sysauth-releng namespace= operation=UPDATE uid=41f9aee4-ea85-42c6-9e56-48c1b9d9862e user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:45:58Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["appstudio-openshift-gitops-argocd-application-controller","basic-user","cluster-status","console-extensions-reader","crd-manager-for-has","crd-manager-for-integration","crd-manager-for-release","helm-chartrepos-viewer","openshift-gitops-apply-tekton-config-parameters","openshift-gitops-jobs-admin","openshift-gitops-openshift-gitops-argocd-application-controller","openshift-minio-apply-tenants","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-result-read-role"] gvk="batch/v1, Kind=CronJob" gvr="batch/v1, Resource=cronjobs" kind=CronJob logger=webhooks/resource/validate name=pipelines-vacuum namespace=product-kubearchive operation=CREATE policy=restrict-docker-io-images resource=product-kubearchive/CronJob/pipelines-vacuum resource.gvk="batch/v1, Kind=CronJob" roles=["build-service:build-service-build-pipeline-config-read-only","build-templates:openshift-gitops-argocd-application-controller","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-gitops:openshift-gitops-argocd-application-controller","openshift-operators:tekton-operator-info","openshift-pipelines:openshift-gitops-argocd-application-controller","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=c5153060-d64b-45dc-9fcf-84e2046966a6 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:45:58Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["appstudio-openshift-gitops-argocd-application-controller","basic-user","cluster-status","console-extensions-reader","crd-manager-for-has","crd-manager-for-integration","crd-manager-for-release","helm-chartrepos-viewer","openshift-gitops-apply-tekton-config-parameters","openshift-gitops-jobs-admin","openshift-gitops-openshift-gitops-argocd-application-controller","openshift-minio-apply-tenants","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-result-read-role"] gvk="batch/v1, Kind=CronJob" gvr="batch/v1, Resource=cronjobs" kind=CronJob logger=webhooks/resource/validate name=vacuum-all namespace=product-kubearchive operation=CREATE policy=restrict-docker-io-images resource=product-kubearchive/CronJob/vacuum-all resource.gvk="batch/v1, Kind=CronJob" roles=["build-service:build-service-build-pipeline-config-read-only","build-templates:openshift-gitops-argocd-application-controller","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-gitops:openshift-gitops-argocd-application-controller","openshift-operators:tekton-operator-info","openshift-pipelines:openshift-gitops-argocd-application-controller","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=ed877bb4-dd4e-482d-b15e-33849e603efd user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:45:58Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["appstudio-openshift-gitops-argocd-application-controller","basic-user","cluster-status","console-extensions-reader","crd-manager-for-has","crd-manager-for-integration","crd-manager-for-release","helm-chartrepos-viewer","openshift-gitops-apply-tekton-config-parameters","openshift-gitops-jobs-admin","openshift-gitops-openshift-gitops-argocd-application-controller","openshift-minio-apply-tenants","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-result-read-role"] gvk="batch/v1, Kind=CronJob" gvr="batch/v1, Resource=cronjobs" kind=CronJob logger=webhooks/resource/validate name=releases-vacuum namespace=product-kubearchive operation=CREATE policy=restrict-docker-io-images resource=product-kubearchive/CronJob/releases-vacuum resource.gvk="batch/v1, Kind=CronJob" roles=["build-service:build-service-build-pipeline-config-read-only","build-templates:openshift-gitops-argocd-application-controller","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-gitops:openshift-gitops-argocd-application-controller","openshift-operators:tekton-operator-info","openshift-pipelines:openshift-gitops-argocd-application-controller","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=98c5d1ee-164c-48dd-93d1-e34304c9c779 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:46:13Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["appstudio-openshift-gitops-argocd-application-controller","basic-user","cluster-status","console-extensions-reader","crd-manager-for-has","crd-manager-for-integration","crd-manager-for-release","helm-chartrepos-viewer","openshift-gitops-apply-tekton-config-parameters","openshift-gitops-jobs-admin","openshift-gitops-openshift-gitops-argocd-application-controller","openshift-minio-apply-tenants","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-result-read-role"] gvk="batch/v1, Kind=CronJob" gvr="batch/v1, Resource=cronjobs" kind=CronJob logger=webhooks/resource/validate name=pipelines-vacuum namespace=product-kubearchive operation=CREATE policy=restrict-docker-io-images resource=product-kubearchive/CronJob/pipelines-vacuum resource.gvk="batch/v1, Kind=CronJob" roles=["build-service:build-service-build-pipeline-config-read-only","build-templates:openshift-gitops-argocd-application-controller","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-gitops:openshift-gitops-argocd-application-controller","openshift-operators:tekton-operator-info","openshift-pipelines:openshift-gitops-argocd-application-controller","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=b2e64566-e058-412b-98e8-8f50bcfeab39 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:46:13Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["appstudio-openshift-gitops-argocd-application-controller","basic-user","cluster-status","console-extensions-reader","crd-manager-for-has","crd-manager-for-integration","crd-manager-for-release","helm-chartrepos-viewer","openshift-gitops-apply-tekton-config-parameters","openshift-gitops-jobs-admin","openshift-gitops-openshift-gitops-argocd-application-controller","openshift-minio-apply-tenants","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-result-read-role"] gvk="batch/v1, Kind=CronJob" gvr="batch/v1, Resource=cronjobs" kind=CronJob logger=webhooks/resource/validate name=vacuum-all namespace=product-kubearchive operation=CREATE policy=restrict-docker-io-images resource=product-kubearchive/CronJob/vacuum-all resource.gvk="batch/v1, Kind=CronJob" roles=["build-service:build-service-build-pipeline-config-read-only","build-templates:openshift-gitops-argocd-application-controller","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-gitops:openshift-gitops-argocd-application-controller","openshift-operators:tekton-operator-info","openshift-pipelines:openshift-gitops-argocd-application-controller","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=d7c83c81-221d-439b-b01a-6ee4bc5a9edb user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:46:13Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["appstudio-openshift-gitops-argocd-application-controller","basic-user","cluster-status","console-extensions-reader","crd-manager-for-has","crd-manager-for-integration","crd-manager-for-release","helm-chartrepos-viewer","openshift-gitops-apply-tekton-config-parameters","openshift-gitops-jobs-admin","openshift-gitops-openshift-gitops-argocd-application-controller","openshift-minio-apply-tenants","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-result-read-role"] gvk="batch/v1, Kind=CronJob" gvr="batch/v1, Resource=cronjobs" kind=CronJob logger=webhooks/resource/validate name=releases-vacuum namespace=product-kubearchive operation=CREATE policy=restrict-docker-io-images resource=product-kubearchive/CronJob/releases-vacuum resource.gvk="batch/v1, Kind=CronJob" roles=["build-service:build-service-build-pipeline-config-read-only","build-templates:openshift-gitops-argocd-application-controller","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-gitops:openshift-gitops-argocd-application-controller","openshift-operators:tekton-operator-info","openshift-pipelines:openshift-gitops-argocd-application-controller","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=5f0849c1-3286-4668-b3f7-4fc06d0e3687 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:46:18Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["appstudio-openshift-gitops-argocd-application-controller","basic-user","cluster-status","console-extensions-reader","crd-manager-for-has","crd-manager-for-integration","crd-manager-for-release","helm-chartrepos-viewer","openshift-gitops-apply-tekton-config-parameters","openshift-gitops-jobs-admin","openshift-gitops-openshift-gitops-argocd-application-controller","openshift-minio-apply-tenants","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-chains-public-key-viewer","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-result-read-role","tekton-results-route-view"] gvk="batch/v1, Kind=Job" gvr="batch/v1, Resource=jobs" kind=Job logger=webhooks/resource/validate name=create-minio-bucket namespace=openshift-pipelines operation=CREATE policy=restrict-docker-io-images resource=openshift-pipelines/Job/create-minio-bucket resource.gvk="batch/v1, Kind=Job" roles=["build-service:build-service-build-pipeline-config-read-only","build-templates:openshift-gitops-argocd-application-controller","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-gitops:openshift-gitops-argocd-application-controller","openshift-operators:tekton-operator-info","openshift-pipelines:openshift-gitops-argocd-application-controller","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=7789f5e8-9e00-4561-ba2a-a95514c205f3 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:46:18Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["appstudio-openshift-gitops-argocd-application-controller","basic-user","cluster-status","console-extensions-reader","crd-manager-for-has","crd-manager-for-integration","crd-manager-for-release","helm-chartrepos-viewer","openshift-gitops-apply-tekton-config-parameters","openshift-gitops-jobs-admin","openshift-gitops-openshift-gitops-argocd-application-controller","openshift-minio-apply-tenants","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-chains-public-key-viewer","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-result-read-role","tekton-results-route-view"] gvk="batch/v1, Kind=Job" gvr="batch/v1, Resource=jobs" kind=Job logger=webhooks/resource/validate name=tekton-chains-signing-secret namespace=openshift-pipelines operation=CREATE policy=restrict-docker-io-images resource=openshift-pipelines/Job/tekton-chains-signing-secret resource.gvk="batch/v1, Kind=Job" roles=["build-service:build-service-build-pipeline-config-read-only","build-templates:openshift-gitops-argocd-application-controller","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-gitops:openshift-gitops-argocd-application-controller","openshift-operators:tekton-operator-info","openshift-pipelines:openshift-gitops-argocd-application-controller","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=9faff948-3571-4b1b-871c-53b1ab73d104 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:46:18Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:controller:job-controller","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-chains-public-key-viewer","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-result-read-role","tekton-results-route-view"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=tekton-chains-signing-secret-hbkdp namespace=openshift-pipelines operation=CREATE policy=restrict-docker-io-images resource=openshift-pipelines/Pod/tekton-chains-signing-secret-hbkdp resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=a179e1b9-fed7-4221-8ee0-e0361747b52d user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=7a1372d8-0c45-4942-8de0-1fe6ae563046"]},"groups":["system:serviceaccounts","system:serviceaccounts:kube-system","system:authenticated"],"uid":"aea9b2ff-bed1-48a1-83ca-795d4f838877","username":"system:serviceaccount:kube-system:job-controller"} v=2
2026-10-11T01:46:18Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:controller:job-controller","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-chains-public-key-viewer","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-result-read-role","tekton-results-route-view"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=create-minio-bucket-48tvd namespace=openshift-pipelines operation=CREATE policy=restrict-docker-io-images resource=openshift-pipelines/Pod/create-minio-bucket-48tvd resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=5a6ef46c-d1e8-4789-917a-b9d8b050d669 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=7a1372d8-0c45-4942-8de0-1fe6ae563046"]},"groups":["system:serviceaccounts","system:serviceaccounts:kube-system","system:authenticated"],"uid":"aea9b2ff-bed1-48a1-83ca-795d4f838877","username":"system:serviceaccount:kube-system:job-controller"} v=2
2026-10-11T01:46:19Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["appstudio-openshift-gitops-argocd-application-controller","basic-user","cluster-status","console-extensions-reader","crd-manager-for-has","crd-manager-for-integration","crd-manager-for-release","helm-chartrepos-viewer","openshift-gitops-apply-tekton-config-parameters","openshift-gitops-jobs-admin","openshift-gitops-openshift-gitops-argocd-application-controller","openshift-minio-apply-tenants","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-result-read-role"] gvk="batch/v1, Kind=CronJob" gvr="batch/v1, Resource=cronjobs" kind=CronJob logger=webhooks/resource/validate name=releases-vacuum namespace=product-kubearchive operation=CREATE policy=restrict-docker-io-images resource=product-kubearchive/CronJob/releases-vacuum resource.gvk="batch/v1, Kind=CronJob" roles=["build-service:build-service-build-pipeline-config-read-only","build-templates:openshift-gitops-argocd-application-controller","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-gitops:openshift-gitops-argocd-application-controller","openshift-operators:tekton-operator-info","openshift-pipelines:openshift-gitops-argocd-application-controller","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=d795d9a3-69b9-4311-a23f-f6b0094cdcce user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:46:19Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["appstudio-openshift-gitops-argocd-application-controller","basic-user","cluster-status","console-extensions-reader","crd-manager-for-has","crd-manager-for-integration","crd-manager-for-release","helm-chartrepos-viewer","openshift-gitops-apply-tekton-config-parameters","openshift-gitops-jobs-admin","openshift-gitops-openshift-gitops-argocd-application-controller","openshift-minio-apply-tenants","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-result-read-role"] gvk="batch/v1, Kind=CronJob" gvr="batch/v1, Resource=cronjobs" kind=CronJob logger=webhooks/resource/validate name=pipelines-vacuum namespace=product-kubearchive operation=CREATE policy=restrict-docker-io-images resource=product-kubearchive/CronJob/pipelines-vacuum resource.gvk="batch/v1, Kind=CronJob" roles=["build-service:build-service-build-pipeline-config-read-only","build-templates:openshift-gitops-argocd-application-controller","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-gitops:openshift-gitops-argocd-application-controller","openshift-operators:tekton-operator-info","openshift-pipelines:openshift-gitops-argocd-application-controller","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=69da113d-c9be-44ff-8eb3-1d1eb5ba9cc3 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:46:19Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["appstudio-openshift-gitops-argocd-application-controller","basic-user","cluster-status","console-extensions-reader","crd-manager-for-has","crd-manager-for-integration","crd-manager-for-release","helm-chartrepos-viewer","openshift-gitops-apply-tekton-config-parameters","openshift-gitops-jobs-admin","openshift-gitops-openshift-gitops-argocd-application-controller","openshift-minio-apply-tenants","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-result-read-role"] gvk="batch/v1, Kind=CronJob" gvr="batch/v1, Resource=cronjobs" kind=CronJob logger=webhooks/resource/validate name=releases-vacuum namespace=product-kubearchive operation=CREATE policy=restrict-docker-io-images resource=product-kubearchive/CronJob/releases-vacuum resource.gvk="batch/v1, Kind=CronJob" roles=["build-service:build-service-build-pipeline-config-read-only","build-templates:openshift-gitops-argocd-application-controller","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-gitops:openshift-gitops-argocd-application-controller","openshift-operators:tekton-operator-info","openshift-pipelines:openshift-gitops-argocd-application-controller","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=f7283e25-d40c-44e6-8ff5-63f1658584a3 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:46:19Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["appstudio-openshift-gitops-argocd-application-controller","basic-user","cluster-status","console-extensions-reader","crd-manager-for-has","crd-manager-for-integration","crd-manager-for-release","helm-chartrepos-viewer","openshift-gitops-apply-tekton-config-parameters","openshift-gitops-jobs-admin","openshift-gitops-openshift-gitops-argocd-application-controller","openshift-minio-apply-tenants","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-result-read-role"] gvk="batch/v1, Kind=CronJob" gvr="batch/v1, Resource=cronjobs" kind=CronJob logger=webhooks/resource/validate name=pipelines-vacuum namespace=product-kubearchive operation=CREATE policy=restrict-docker-io-images resource=product-kubearchive/CronJob/pipelines-vacuum resource.gvk="batch/v1, Kind=CronJob" roles=["build-service:build-service-build-pipeline-config-read-only","build-templates:openshift-gitops-argocd-application-controller","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-gitops:openshift-gitops-argocd-application-controller","openshift-operators:tekton-operator-info","openshift-pipelines:openshift-gitops-argocd-application-controller","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=8e9c31db-bcda-409b-8315-f1b9012aa67d user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:48:11Z INF cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/rest/warnings.go:107 > Warning: kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ logger=klog v=0
2026-10-11T01:49:08Z INF cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/rest/warnings.go:107 > Warning: kyverno.io/v2 PolicyException is deprecated and will be removed in a future release; migrate to PolicyException (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ logger=klog v=0
2026-10-11T01:49:16Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=bootstrap-tenant-namespace-queue namespace= operation=UPDATE uid=39b6cb7b-fe90-4bae-a26b-a5a3d7dc746a user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:49:16Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpmonitoring namespace= operation=UPDATE uid=3e12205a-9f4e-4ab7-8187-cbe7bea13768 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:49:16Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-integration namespace= operation=UPDATE uid=ea29ca7a-fded-4b6d-894e-42d398ffe401 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:49:16Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-sysauth-releng namespace= operation=UPDATE uid=98bf0915-9171-4a75-a899-8e6844fe13e6 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:49:16Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=tekton-taskrun-resource-policy namespace= operation=UPDATE uid=b97080f7-8bc5-407e-b407-b919dd375e91 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:49:16Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=adjust-buildah-resources-for-remote-platforms namespace= operation=UPDATE uid=e44be004-946f-4473-80fe-a865c4f33fb9 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:49:16Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-system-authenticated namespace= operation=UPDATE uid=be480bf7-d24f-43e2-b224-be37bb86a4f6 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:49:16Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress namespace= operation=UPDATE uid=51dea53a-392a-4de6-a9b4-438cb2194ea5 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:49:16Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-olm namespace= operation=UPDATE uid=59542949-3e2d-492e-813c-f348199a5ca4 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:49:17Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-kubearchiveconfig namespace= operation=UPDATE uid=fb1793df-a1dc-4e25-a343-0f65383a7e99 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:49:17Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace namespace= operation=UPDATE uid=213ad308-0934-45d5-aad4-424d29cf8b7a user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:49:17Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-rbcm namespace= operation=UPDATE uid=ea44df6e-061d-4f01-8e78-89a843221746 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:49:17Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-generate-konflux-viewer-access namespace= operation=UPDATE uid=c3233ca7-096b-42a2-947a-cd0184494643 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:49:17Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpconsole namespace= operation=UPDATE uid=74e9c10c-92cb-4fc4-9b21-dd0de83194ea user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:49:17Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-binding-system-groups namespace= operation=UPDATE uid=c593bb75-5c40-4779-96a2-b42162df29b7 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:49:17Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-docker-io-images namespace= operation=UPDATE uid=a6ccc00c-9247-4355-99ce-65544cfbbf29 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:49:25Z INF cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/rest/warnings.go:107 > Warning: kyverno.io/v1 Policy is deprecated and will be removed in a future release; migrate to NamespacedValidatingPolicy and the other namespaced policy types (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ logger=klog v=0
2026-10-11T01:50:00Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:controller:cronjob-controller","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-result-read-role"] gvk="batch/v1, Kind=Job" gvr="batch/v1, Resource=jobs" kind=Job logger=webhooks/resource/validate name=pipelines-vacuum-29861390 namespace=product-kubearchive operation=CREATE policy=restrict-docker-io-images resource=product-kubearchive/Job/pipelines-vacuum-29861390 resource.gvk="batch/v1, Kind=Job" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=ed48e0e8-f6e0-426e-9568-bf26bff9e242 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4914fd7e-06ec-417e-b4d6-792978196916"]},"groups":["system:serviceaccounts","system:serviceaccounts:kube-system","system:authenticated"],"uid":"d8ec0be1-331c-458c-81a5-11e64906e9e1","username":"system:serviceaccount:kube-system:cronjob-controller"} v=2
2026-10-11T01:50:00Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:controller:cronjob-controller","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-result-read-role"] gvk="batch/v1, Kind=Job" gvr="batch/v1, Resource=jobs" kind=Job logger=webhooks/resource/validate name=osd-delete-backplane-serviceaccounts-29861390 namespace=openshift-backplane operation=CREATE policy=restrict-docker-io-images resource=openshift-backplane/Job/osd-delete-backplane-serviceaccounts-29861390 resource.gvk="batch/v1, Kind=Job" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=6d03589f-0b4a-4306-9329-1b3e37c00ba8 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4914fd7e-06ec-417e-b4d6-792978196916"]},"groups":["system:serviceaccounts","system:serviceaccounts:kube-system","system:authenticated"],"uid":"d8ec0be1-331c-458c-81a5-11e64906e9e1","username":"system:serviceaccount:kube-system:cronjob-controller"} v=2
2026-10-11T01:50:00Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:controller:job-controller","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=pipelines-vacuum-29861390-k2lxz namespace=product-kubearchive operation=CREATE policy=restrict-docker-io-images resource=product-kubearchive/Pod/pipelines-vacuum-29861390-k2lxz resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=68d308a5-f6e2-47f5-825d-eedd83830e92 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=7a1372d8-0c45-4942-8de0-1fe6ae563046"]},"groups":["system:serviceaccounts","system:serviceaccounts:kube-system","system:authenticated"],"uid":"aea9b2ff-bed1-48a1-83ca-795d4f838877","username":"system:serviceaccount:kube-system:job-controller"} v=2
2026-10-11T01:50:00Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:controller:job-controller","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=osd-delete-backplane-serviceaccounts-29861390-hx5vc namespace=openshift-backplane operation=CREATE policy=restrict-docker-io-images resource=openshift-backplane/Pod/osd-delete-backplane-serviceaccounts-29861390-hx5vc resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=3864ffb1-4f59-4766-8ffe-4e1ab1a056b4 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=7a1372d8-0c45-4942-8de0-1fe6ae563046"]},"groups":["system:serviceaccounts","system:serviceaccounts:kube-system","system:authenticated"],"uid":"aea9b2ff-bed1-48a1-83ca-795d4f838877","username":"system:serviceaccount:kube-system:job-controller"} v=2
2026-10-11T01:50:53Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="apps/v1, Kind=StatefulSet" gvr="apps/v1, Resource=statefulsets" kind=StatefulSet logger=webhooks/resource/validate name=affinity-assistant-d00e65d0f9 namespace=chains-e2e-dmwr operation=CREATE policy=restrict-docker-io-images resource=chains-e2e-dmwr/StatefulSet/affinity-assistant-d00e65d0f9 resource.gvk="apps/v1, Kind=StatefulSet" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=2632bcb5-14cc-48d0-85c6-00d21a56b7f7 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=87cd77f2-c007-42a2-94b4-8a4e2198d92b"],"authentication.kubernetes.io/node-name":["ip-10-0-132-195.ec2.internal"],"authentication.kubernetes.io/node-uid":["7418af5c-2da2-4e2b-8e54-161e5e037e4b"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-0"],"authentication.kubernetes.io/pod-uid":["e2766765-5819-4035-b8ac-6bf77c131b54"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"559a2e21-6cff-4420-9a79-4aa20c563d85","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-11T01:50:53Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:controller:statefulset-controller","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=affinity-assistant-d00e65d0f9-0 namespace=chains-e2e-dmwr operation=CREATE policy=restrict-docker-io-images resource=chains-e2e-dmwr/Pod/affinity-assistant-d00e65d0f9-0 resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=fe0e70c3-7822-44ff-95d2-d0492161f2ea user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ff349336-b0e5-4d7b-bcde-c2406a0ed1c0"]},"groups":["system:serviceaccounts","system:serviceaccounts:kube-system","system:authenticated"],"uid":"f2d023ab-ede8-4411-a096-54dc1b78fb72","username":"system:serviceaccount:kube-system:statefulset-controller"} v=2
2026-10-11T01:50:53Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=buildah-demo-vddxxctnnj-init-pod namespace=chains-e2e-dmwr operation=CREATE policy=restrict-docker-io-images resource=chains-e2e-dmwr/Pod/buildah-demo-vddxxctnnj-init-pod resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=5ef2005e-a6fe-44f4-b132-b3a7ebfb7651 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=e143863d-d1bc-4d62-a39c-61e6dbf1f637"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-1"],"authentication.kubernetes.io/pod-uid":["009728df-29d0-4e16-bf77-3fedcd728191"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"559a2e21-6cff-4420-9a79-4aa20c563d85","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-11T01:51:10Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:controller:replicaset-controller","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-chains-public-key-viewer","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-result-read-role","tekton-results-route-view"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=tekton-pipelines-webhook-788dfd9b96-kvjxj namespace=openshift-pipelines operation=CREATE policy=restrict-docker-io-images resource=openshift-pipelines/Pod/tekton-pipelines-webhook-788dfd9b96-kvjxj resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=eed836db-f4da-42b1-95d3-a09e7ceb0092 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=a413cd9d-ad5b-4ef2-9f62-263e39c897f5"]},"groups":["system:serviceaccounts","system:serviceaccounts:kube-system","system:authenticated"],"uid":"7f8a393d-1849-45c4-b46c-46c55536260f","username":"system:serviceaccount:kube-system:replicaset-controller"} v=2
2026-10-11T01:51:10Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=buildah-demo-vddxxctnnj-clone-repository-pod namespace=chains-e2e-dmwr operation=CREATE policy=restrict-docker-io-images resource=chains-e2e-dmwr/Pod/buildah-demo-vddxxctnnj-clone-repository-pod resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=6d1ca8fd-ed12-4083-ba18-86682a939d86 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=87cd77f2-c007-42a2-94b4-8a4e2198d92b"],"authentication.kubernetes.io/node-name":["ip-10-0-132-195.ec2.internal"],"authentication.kubernetes.io/node-uid":["7418af5c-2da2-4e2b-8e54-161e5e037e4b"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-0"],"authentication.kubernetes.io/pod-uid":["e2766765-5819-4035-b8ac-6bf77c131b54"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"559a2e21-6cff-4420-9a79-4aa20c563d85","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-11T01:51:29Z TRC kyverno/pkg/webhooks/resource/mutation/mutation.go:131 > mutation rules from policy applied successfully URLParams= clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/mutate name=buildah-demo-vddxxctnnj-prefetch-dependencies-pod namespace=chains-e2e-dmwr operation=CREATE policy=tekton-taskrun-resource-policy resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] rules=["set-task-resources"] uid=339c9ec3-3be2-4cdd-93eb-d08c552010da user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=87cd77f2-c007-42a2-94b4-8a4e2198d92b"],"authentication.kubernetes.io/node-name":["ip-10-0-132-195.ec2.internal"],"authentication.kubernetes.io/node-uid":["7418af5c-2da2-4e2b-8e54-161e5e037e4b"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-0"],"authentication.kubernetes.io/pod-uid":["e2766765-5819-4035-b8ac-6bf77c131b54"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"559a2e21-6cff-4420-9a79-4aa20c563d85","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-11T01:51:29Z TRC kyverno/pkg/webhooks/resource/mutation/mutation.go:131 > mutation rules from policy applied successfully URLParams= clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/mutate name=buildah-demo-vddxxctnnj-prefetch-dependencies-pod namespace=chains-e2e-dmwr operation=CREATE policy=tekton-taskrun-resource-policy resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] rules=["set-task-resources"] uid=ab67a939-cbbf-4b33-af65-65d34f166dcb user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=87cd77f2-c007-42a2-94b4-8a4e2198d92b"],"authentication.kubernetes.io/node-name":["ip-10-0-132-195.ec2.internal"],"authentication.kubernetes.io/node-uid":["7418af5c-2da2-4e2b-8e54-161e5e037e4b"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-0"],"authentication.kubernetes.io/pod-uid":["e2766765-5819-4035-b8ac-6bf77c131b54"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"559a2e21-6cff-4420-9a79-4aa20c563d85","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-11T01:51:30Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=buildah-demo-vddxxctnnj-prefetch-dependencies-pod namespace=chains-e2e-dmwr operation=CREATE policy=restrict-docker-io-images resource=chains-e2e-dmwr/Pod/buildah-demo-vddxxctnnj-prefetch-dependencies-pod resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=d62f0d05-a777-4fe8-94dc-840a54f2a84a user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=87cd77f2-c007-42a2-94b4-8a4e2198d92b"],"authentication.kubernetes.io/node-name":["ip-10-0-132-195.ec2.internal"],"authentication.kubernetes.io/node-uid":["7418af5c-2da2-4e2b-8e54-161e5e037e4b"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-0"],"authentication.kubernetes.io/pod-uid":["e2766765-5819-4035-b8ac-6bf77c131b54"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"559a2e21-6cff-4420-9a79-4aa20c563d85","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-11T01:51:46Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=buildah-demo-vddxxctnnj-build-container-pod namespace=chains-e2e-dmwr operation=CREATE policy=restrict-docker-io-images resource=chains-e2e-dmwr/Pod/buildah-demo-vddxxctnnj-build-container-pod resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=447a370d-7ad3-478b-b9df-a9c73338c6ac user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=e143863d-d1bc-4d62-a39c-61e6dbf1f637"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-1"],"authentication.kubernetes.io/pod-uid":["009728df-29d0-4e16-bf77-3fedcd728191"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"559a2e21-6cff-4420-9a79-4aa20c563d85","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-11T01:51:55Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:controller:replicaset-controller","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-chains-public-key-viewer","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-result-read-role","tekton-results-route-view"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=tekton-pipelines-webhook-788dfd9b96-llchh namespace=openshift-pipelines operation=CREATE policy=restrict-docker-io-images resource=openshift-pipelines/Pod/tekton-pipelines-webhook-788dfd9b96-llchh resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=31d1a844-151e-4579-ba83-69af90108bd9 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=a413cd9d-ad5b-4ef2-9f62-263e39c897f5"]},"groups":["system:serviceaccounts","system:serviceaccounts:kube-system","system:authenticated"],"uid":"7f8a393d-1849-45c4-b46c-46c55536260f","username":"system:serviceaccount:kube-system:replicaset-controller"} v=2
2026-10-11T01:52:13Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=bootstrap-tenant-namespace-queue namespace= operation=UPDATE uid=ab738cb4-9a2b-4465-977e-6003ace1b3e0 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:52:13Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-binding-system-groups namespace= operation=UPDATE uid=251b837b-6242-4892-869e-e337a88e09ea user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:52:13Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-kubearchiveconfig namespace= operation=UPDATE uid=87d39112-71e7-4b1c-a17c-3ac1d8c8cafe user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:52:14Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpconsole namespace= operation=UPDATE uid=b2268896-989c-455c-9316-915fd5e87c86 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:52:14Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-olm namespace= operation=UPDATE uid=b1cad929-023c-405f-bed0-5753f0e14f5c user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:52:14Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace namespace= operation=UPDATE uid=026602bb-1d06-4343-a718-184ebb973273 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:52:14Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress namespace= operation=UPDATE uid=be7c28b4-c3da-42fc-b9c5-c7a2d5fbd52f user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:52:14Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-rbcm namespace= operation=UPDATE uid=a40347ca-e80e-4499-85e2-b323b6ded798 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:52:14Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-generate-konflux-viewer-access namespace= operation=UPDATE uid=368fa901-8ca4-480d-adfd-c87b8f32a3f8 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:52:14Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=tekton-taskrun-resource-policy namespace= operation=UPDATE uid=843f15ed-d9fc-440b-a70a-025151bdda49 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:52:14Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpmonitoring namespace= operation=UPDATE uid=afeca516-4b3c-4ca8-ba9a-1c91139cf3f5 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:52:14Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-system-authenticated namespace= operation=UPDATE uid=1b0d0c46-b4c2-4b24-ad2e-327db1231f17 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:52:14Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-sysauth-releng namespace= operation=UPDATE uid=471c928e-0995-49d8-a54b-c95526c5272f user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:52:14Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=adjust-buildah-resources-for-remote-platforms namespace= operation=UPDATE uid=f42c11d8-c7b7-476d-98e3-4369a6982a07 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:52:14Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-integration namespace= operation=UPDATE uid=80c018a7-4997-4722-8009-7d9afb03e1c8 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:52:14Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-docker-io-images namespace= operation=UPDATE uid=30c8d321-0489-4f84-bfb7-3e821c00f2c6 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:53:10Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:controller:replicaset-controller","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-chains-public-key-viewer","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-result-read-role","tekton-results-route-view"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=tekton-pipelines-webhook-788dfd9b96-k96rj namespace=openshift-pipelines operation=CREATE policy=restrict-docker-io-images resource=openshift-pipelines/Pod/tekton-pipelines-webhook-788dfd9b96-k96rj resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=b81356a2-0a28-4b7b-898c-4d43d482743d user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=a413cd9d-ad5b-4ef2-9f62-263e39c897f5"]},"groups":["system:serviceaccounts","system:serviceaccounts:kube-system","system:authenticated"],"uid":"7f8a393d-1849-45c4-b46c-46c55536260f","username":"system:serviceaccount:kube-system:replicaset-controller"} v=2
2026-10-11T01:53:57Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=buildah-demo-vddxxctnnj-build-image-index-pod namespace=chains-e2e-dmwr operation=CREATE policy=restrict-docker-io-images resource=chains-e2e-dmwr/Pod/buildah-demo-vddxxctnnj-build-image-index-pod resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=17f2b137-6cc3-46c0-94c5-1b05bd6a1f04 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=e143863d-d1bc-4d62-a39c-61e6dbf1f637"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-1"],"authentication.kubernetes.io/pod-uid":["009728df-29d0-4e16-bf77-3fedcd728191"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"559a2e21-6cff-4420-9a79-4aa20c563d85","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-11T01:54:39Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=buildah-demo-vddxxctnnj-push-dockerfile-pod namespace=chains-e2e-dmwr operation=CREATE policy=restrict-docker-io-images resource=chains-e2e-dmwr/Pod/buildah-demo-vddxxctnnj-push-dockerfile-pod resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=c21f6efa-c3e9-4c34-8e97-f3fbccb7ac35 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=e143863d-d1bc-4d62-a39c-61e6dbf1f637"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-1"],"authentication.kubernetes.io/pod-uid":["009728df-29d0-4e16-bf77-3fedcd728191"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"559a2e21-6cff-4420-9a79-4aa20c563d85","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-11T01:54:39Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=buildah-demo-vddxxctnnj-apply-tags-pod namespace=chains-e2e-dmwr operation=CREATE policy=restrict-docker-io-images resource=chains-e2e-dmwr/Pod/buildah-demo-vddxxctnnj-apply-tags-pod resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=ead2e00d-d1b5-43ce-a02c-e8299f4ba394 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=e143863d-d1bc-4d62-a39c-61e6dbf1f637"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-1"],"authentication.kubernetes.io/pod-uid":["009728df-29d0-4e16-bf77-3fedcd728191"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"559a2e21-6cff-4420-9a79-4aa20c563d85","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-11T01:54:56Z TRC kyverno/pkg/webhooks/resource/mutation/mutation.go:131 > mutation rules from policy applied successfully URLParams= clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/mutate name=verify-enterprise-contract-a8902d334ad18a2b117970a0f40d82ba-pod namespace=chains-e2e-dmwr operation=CREATE policy=tekton-taskrun-resource-policy resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] rules=["set-task-resources"] uid=d0594392-6284-4d5b-8b46-cb74342ca1f2 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=e143863d-d1bc-4d62-a39c-61e6dbf1f637"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-1"],"authentication.kubernetes.io/pod-uid":["009728df-29d0-4e16-bf77-3fedcd728191"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"559a2e21-6cff-4420-9a79-4aa20c563d85","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-11T01:54:56Z TRC kyverno/pkg/webhooks/resource/mutation/mutation.go:131 > mutation rules from policy applied successfully URLParams= clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/mutate name=verify-enterprise-contract-a8902d334ad18a2b117970a0f40d82ba-pod namespace=chains-e2e-dmwr operation=CREATE policy=tekton-taskrun-resource-policy resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] rules=["set-task-resources"] uid=5e8bff4e-cc41-4075-9e34-503fcaf67cf8 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=e143863d-d1bc-4d62-a39c-61e6dbf1f637"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-1"],"authentication.kubernetes.io/pod-uid":["009728df-29d0-4e16-bf77-3fedcd728191"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"559a2e21-6cff-4420-9a79-4aa20c563d85","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-11T01:54:57Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=verify-enterprise-contract-a8902d334ad18a2b117970a0f40d82ba-pod namespace=chains-e2e-dmwr operation=CREATE policy=restrict-docker-io-images resource=chains-e2e-dmwr/Pod/verify-enterprise-contract-a8902d334ad18a2b117970a0f40d82ba-pod resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=93b3de1e-a3f3-453d-adfd-ecdba2f6d662 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=e143863d-d1bc-4d62-a39c-61e6dbf1f637"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-1"],"authentication.kubernetes.io/pod-uid":["009728df-29d0-4e16-bf77-3fedcd728191"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"559a2e21-6cff-4420-9a79-4aa20c563d85","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-11T01:55:00Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:controller:cronjob-controller","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-result-read-role"] gvk="batch/v1, Kind=Job" gvr="batch/v1, Resource=jobs" kind=Job logger=webhooks/resource/validate name=pipelines-vacuum-29861395 namespace=product-kubearchive operation=CREATE policy=restrict-docker-io-images resource=product-kubearchive/Job/pipelines-vacuum-29861395 resource.gvk="batch/v1, Kind=Job" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=39ffcce1-5177-4d6c-9295-84bed754efcf user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4914fd7e-06ec-417e-b4d6-792978196916"]},"groups":["system:serviceaccounts","system:serviceaccounts:kube-system","system:authenticated"],"uid":"d8ec0be1-331c-458c-81a5-11e64906e9e1","username":"system:serviceaccount:kube-system:cronjob-controller"} v=2
2026-10-11T01:55:00Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:controller:job-controller","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=pipelines-vacuum-29861395-n6z7j namespace=product-kubearchive operation=CREATE policy=restrict-docker-io-images resource=product-kubearchive/Pod/pipelines-vacuum-29861395-n6z7j resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=cfb40f24-8de9-4a49-ab84-23770d71d5da user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=7a1372d8-0c45-4942-8de0-1fe6ae563046"]},"groups":["system:serviceaccounts","system:serviceaccounts:kube-system","system:authenticated"],"uid":"aea9b2ff-bed1-48a1-83ca-795d4f838877","username":"system:serviceaccount:kube-system:job-controller"} v=2
2026-10-11T01:55:13Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-binding-system-groups namespace= operation=UPDATE uid=184930ac-87e0-4149-930b-14f8fbce2e75 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:55:13Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace namespace= operation=UPDATE uid=fd7e577c-2d4c-42a1-89e5-510463441782 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:55:13Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-sysauth-releng namespace= operation=UPDATE uid=20fb2d44-9f57-471c-a756-10d912d2a1eb user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:55:13Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-system-authenticated namespace= operation=UPDATE uid=1bdf453e-064e-43e9-85ce-b66a748b06ca user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:55:14Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=adjust-buildah-resources-for-remote-platforms namespace= operation=UPDATE uid=26485055-0e64-4339-ba11-b12a1c8874e9 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:55:14Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-kubearchiveconfig namespace= operation=UPDATE uid=7c8abc88-dc02-429c-8eeb-6b0ab9ca6eb6 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:55:14Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress namespace= operation=UPDATE uid=78ff74ba-358a-4110-bcf2-d686c7e6ec1b user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:55:14Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-rbcm namespace= operation=UPDATE uid=9730c1af-710f-4431-b2c7-a9abec79a80c user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:55:14Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=bootstrap-tenant-namespace-queue namespace= operation=UPDATE uid=e7692f19-c9e3-4c4a-b7e0-1dc0ed5d69b8 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:55:14Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-integration namespace= operation=UPDATE uid=35aabd93-fb48-4065-af37-f53d6f710766 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:55:14Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpmonitoring namespace= operation=UPDATE uid=cbe8547c-39b6-4d82-978e-0833f96b5af3 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:55:14Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-generate-konflux-viewer-access namespace= operation=UPDATE uid=1b5ac979-30fe-49d1-b6b8-39518c30d4e4 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:55:14Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-docker-io-images namespace= operation=UPDATE uid=8d91ba22-b58f-4481-9b1e-a45f95751eb7 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:55:14Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpconsole namespace= operation=UPDATE uid=8dbe6adf-06aa-4e1d-bc19-29a03623b7dd user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:55:14Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-olm namespace= operation=UPDATE uid=6ccdcbd8-bb4a-454c-8a31-59301e22a398 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:55:14Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=tekton-taskrun-resource-policy namespace= operation=UPDATE uid=81455026-c0a1-46b2-9158-7611066f745c user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1385c0d-ec57-4c48-8168-38e80baa8a51"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f2d840fa-0d7a-4c42-b064-effee6b1957d"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5a054d16-d6f7-4571-b029-b4b37ae66fe3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-11T01:55:20Z TRC kyverno/pkg/webhooks/resource/mutation/mutation.go:131 > mutation rules from policy applied successfully URLParams= clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/mutate name=verify-enterprise-contract-0ad7a9aa2bd62addd1de524dc184b88f-pod namespace=chains-e2e-dmwr operation=CREATE policy=tekton-taskrun-resource-policy resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] rules=["set-task-resources"] uid=d767233e-b17a-4224-b93c-405499a2804e user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=87cd77f2-c007-42a2-94b4-8a4e2198d92b"],"authentication.kubernetes.io/node-name":["ip-10-0-132-195.ec2.internal"],"authentication.kubernetes.io/node-uid":["7418af5c-2da2-4e2b-8e54-161e5e037e4b"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-0"],"authentication.kubernetes.io/pod-uid":["e2766765-5819-4035-b8ac-6bf77c131b54"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"559a2e21-6cff-4420-9a79-4aa20c563d85","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-11T01:55:21Z TRC kyverno/pkg/webhooks/resource/mutation/mutation.go:131 > mutation rules from policy applied successfully URLParams= clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/mutate name=verify-enterprise-contract-0ad7a9aa2bd62addd1de524dc184b88f-pod namespace=chains-e2e-dmwr operation=CREATE policy=tekton-taskrun-resource-policy resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] rules=["set-task-resources"] uid=e90135b6-1d8b-4749-9914-c68e71dac6f6 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=87cd77f2-c007-42a2-94b4-8a4e2198d92b"],"authentication.kubernetes.io/node-name":["ip-10-0-132-195.ec2.internal"],"authentication.kubernetes.io/node-uid":["7418af5c-2da2-4e2b-8e54-161e5e037e4b"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-0"],"authentication.kubernetes.io/pod-uid":["e2766765-5819-4035-b8ac-6bf77c131b54"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"559a2e21-6cff-4420-9a79-4aa20c563d85","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-11T01:55:21Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=verify-enterprise-contract-0ad7a9aa2bd62addd1de524dc184b88f-pod namespace=chains-e2e-dmwr operation=CREATE policy=restrict-docker-io-images resource=chains-e2e-dmwr/Pod/verify-enterprise-contract-0ad7a9aa2bd62addd1de524dc184b88f-pod resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=ef3e8bce-50b0-4fef-ace2-3421e285239e user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=87cd77f2-c007-42a2-94b4-8a4e2198d92b"],"authentication.kubernetes.io/node-name":["ip-10-0-132-195.ec2.internal"],"authentication.kubernetes.io/node-uid":["7418af5c-2da2-4e2b-8e54-161e5e037e4b"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-0"],"authentication.kubernetes.io/pod-uid":["e2766765-5819-4035-b8ac-6bf77c131b54"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"559a2e21-6cff-4420-9a79-4aa20c563d85","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-11T01:55:22Z INF cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/rest/warnings.go:107 > Warning: kyverno.io/v1 Policy is deprecated and will be removed in a future release; migrate to NamespacedValidatingPolicy and the other namespaced policy types (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ logger=klog v=0
2026-10-11T01:55:36Z TRC kyverno/pkg/webhooks/resource/mutation/mutation.go:131 > mutation rules from policy applied successfully URLParams= clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/mutate name=verify-enterprise-contract-0479f3cd5660df197df91d64b06e5181-pod namespace=chains-e2e-dmwr operation=CREATE policy=tekton-taskrun-resource-policy resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] rules=["set-task-resources"] uid=a072b9fa-a491-4181-a35c-8d234c7b2dd4 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=e143863d-d1bc-4d62-a39c-61e6dbf1f637"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-1"],"authentication.kubernetes.io/pod-uid":["009728df-29d0-4e16-bf77-3fedcd728191"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"559a2e21-6cff-4420-9a79-4aa20c563d85","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-11T01:55:37Z TRC kyverno/pkg/webhooks/resource/mutation/mutation.go:131 > mutation rules from policy applied successfully URLParams= clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/mutate name=verify-enterprise-contract-0479f3cd5660df197df91d64b06e5181-pod namespace=chains-e2e-dmwr operation=CREATE policy=tekton-taskrun-resource-policy resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] rules=["set-task-resources"] uid=57163da7-b257-4826-8ed3-656a2f4624fe user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=e143863d-d1bc-4d62-a39c-61e6dbf1f637"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-1"],"authentication.kubernetes.io/pod-uid":["009728df-29d0-4e16-bf77-3fedcd728191"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"559a2e21-6cff-4420-9a79-4aa20c563d85","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-11T01:55:37Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=verify-enterprise-contract-0479f3cd5660df197df91d64b06e5181-pod namespace=chains-e2e-dmwr operation=CREATE policy=restrict-docker-io-images resource=chains-e2e-dmwr/Pod/verify-enterprise-contract-0479f3cd5660df197df91d64b06e5181-pod resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=edbb9c88-d262-4cb4-8396-a62fde854c3b user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=e143863d-d1bc-4d62-a39c-61e6dbf1f637"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-1"],"authentication.kubernetes.io/pod-uid":["009728df-29d0-4e16-bf77-3fedcd728191"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"559a2e21-6cff-4420-9a79-4aa20c563d85","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-11T01:55:51Z TRC kyverno/pkg/webhooks/resource/mutation/mutation.go:131 > mutation rules from policy applied successfully URLParams= clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/mutate name=verify-enterprise-contract-327e687310ef034e1a41ac9273810a40-pod namespace=chains-e2e-dmwr operation=CREATE policy=tekton-taskrun-resource-policy resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] rules=["set-task-resources"] uid=9026d668-764d-4faa-90f6-0923394fabee user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=87cd77f2-c007-42a2-94b4-8a4e2198d92b"],"authentication.kubernetes.io/node-name":["ip-10-0-132-195.ec2.internal"],"authentication.kubernetes.io/node-uid":["7418af5c-2da2-4e2b-8e54-161e5e037e4b"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-0"],"authentication.kubernetes.io/pod-uid":["e2766765-5819-4035-b8ac-6bf77c131b54"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"559a2e21-6cff-4420-9a79-4aa20c563d85","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-11T01:55:51Z TRC kyverno/pkg/webhooks/resource/mutation/mutation.go:131 > mutation rules from policy applied successfully URLParams= clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/mutate name=verify-enterprise-contract-327e687310ef034e1a41ac9273810a40-pod namespace=chains-e2e-dmwr operation=CREATE policy=tekton-taskrun-resource-policy resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] rules=["set-task-resources"] uid=321cad95-fd83-4258-aed9-c8f6439755b1 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=87cd77f2-c007-42a2-94b4-8a4e2198d92b"],"authentication.kubernetes.io/node-name":["ip-10-0-132-195.ec2.internal"],"authentication.kubernetes.io/node-uid":["7418af5c-2da2-4e2b-8e54-161e5e037e4b"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-0"],"authentication.kubernetes.io/pod-uid":["e2766765-5819-4035-b8ac-6bf77c131b54"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"559a2e21-6cff-4420-9a79-4aa20c563d85","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-11T01:55:51Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=verify-enterprise-contract-327e687310ef034e1a41ac9273810a40-pod namespace=chains-e2e-dmwr operation=CREATE policy=restrict-docker-io-images resource=chains-e2e-dmwr/Pod/verify-enterprise-contract-327e687310ef034e1a41ac9273810a40-pod resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=beb420f9-82c0-4a1e-8351-89c2be9bb08a user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=87cd77f2-c007-42a2-94b4-8a4e2198d92b"],"authentication.kubernetes.io/node-name":["ip-10-0-132-195.ec2.internal"],"authentication.kubernetes.io/node-uid":["7418af5c-2da2-4e2b-8e54-161e5e037e4b"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-0"],"authentication.kubernetes.io/pod-uid":["e2766765-5819-4035-b8ac-6bf77c131b54"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"559a2e21-6cff-4420-9a79-4aa20c563d85","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-11T01:56:03Z TRC kyverno/pkg/webhooks/resource/mutation/mutation.go:131 > mutation rules from policy applied successfully URLParams= clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/mutate name=verify-enterprise-contract-b7b5f1eed21c47cf4bcf551ee063eeb0-pod namespace=chains-e2e-dmwr operation=CREATE policy=tekton-taskrun-resource-policy resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] rules=["set-task-resources"] uid=1f8a0e08-9614-4618-8b6a-b27911f81c4a user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=87cd77f2-c007-42a2-94b4-8a4e2198d92b"],"authentication.kubernetes.io/node-name":["ip-10-0-132-195.ec2.internal"],"authentication.kubernetes.io/node-uid":["7418af5c-2da2-4e2b-8e54-161e5e037e4b"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-0"],"authentication.kubernetes.io/pod-uid":["e2766765-5819-4035-b8ac-6bf77c131b54"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"559a2e21-6cff-4420-9a79-4aa20c563d85","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-11T01:56:03Z TRC kyverno/pkg/webhooks/resource/mutation/mutation.go:131 > mutation rules from policy applied successfully URLParams= clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/mutate name=verify-enterprise-contract-b7b5f1eed21c47cf4bcf551ee063eeb0-pod namespace=chains-e2e-dmwr operation=CREATE policy=tekton-taskrun-resource-policy resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] rules=["set-task-resources"] uid=b834da25-c347-4a3f-9350-a19be0d93d79 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=87cd77f2-c007-42a2-94b4-8a4e2198d92b"],"authentication.kubernetes.io/node-name":["ip-10-0-132-195.ec2.internal"],"authentication.kubernetes.io/node-uid":["7418af5c-2da2-4e2b-8e54-161e5e037e4b"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-0"],"authentication.kubernetes.io/pod-uid":["e2766765-5819-4035-b8ac-6bf77c131b54"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"559a2e21-6cff-4420-9a79-4aa20c563d85","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-11T01:56:03Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=verify-enterprise-contract-b7b5f1eed21c47cf4bcf551ee063eeb0-pod namespace=chains-e2e-dmwr operation=CREATE policy=restrict-docker-io-images resource=chains-e2e-dmwr/Pod/verify-enterprise-contract-b7b5f1eed21c47cf4bcf551ee063eeb0-pod resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=f6a17aaf-543f-4e1c-9746-a6c0ac5c04f9 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=87cd77f2-c007-42a2-94b4-8a4e2198d92b"],"authentication.kubernetes.io/node-name":["ip-10-0-132-195.ec2.internal"],"authentication.kubernetes.io/node-uid":["7418af5c-2da2-4e2b-8e54-161e5e037e4b"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-0"],"authentication.kubernetes.io/pod-uid":["e2766765-5819-4035-b8ac-6bf77c131b54"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"559a2e21-6cff-4420-9a79-4aa20c563d85","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-11T01:56:16Z TRC kyverno/pkg/webhooks/resource/mutation/mutation.go:131 > mutation rules from policy applied successfully URLParams= clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/mutate name=verify-enterprise-contract-97ca67eb0e556fc36d0364a063d34c34-pod namespace=chains-e2e-dmwr operation=CREATE policy=tekton-taskrun-resource-policy resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] rules=["set-task-resources"] uid=3be8638f-0b5a-46c8-8272-e27c8a98d8fd user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=87cd77f2-c007-42a2-94b4-8a4e2198d92b"],"authentication.kubernetes.io/node-name":["ip-10-0-132-195.ec2.internal"],"authentication.kubernetes.io/node-uid":["7418af5c-2da2-4e2b-8e54-161e5e037e4b"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-0"],"authentication.kubernetes.io/pod-uid":["e2766765-5819-4035-b8ac-6bf77c131b54"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"559a2e21-6cff-4420-9a79-4aa20c563d85","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-11T01:56:16Z TRC kyverno/pkg/webhooks/resource/mutation/mutation.go:131 > mutation rules from policy applied successfully URLParams= clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/mutate name=verify-enterprise-contract-97ca67eb0e556fc36d0364a063d34c34-pod namespace=chains-e2e-dmwr operation=CREATE policy=tekton-taskrun-resource-policy resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] rules=["set-task-resources"] uid=c2caa008-74b9-4873-84ee-5a4883e33111 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=87cd77f2-c007-42a2-94b4-8a4e2198d92b"],"authentication.kubernetes.io/node-name":["ip-10-0-132-195.ec2.internal"],"authentication.kubernetes.io/node-uid":["7418af5c-2da2-4e2b-8e54-161e5e037e4b"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-0"],"authentication.kubernetes.io/pod-uid":["e2766765-5819-4035-b8ac-6bf77c131b54"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"559a2e21-6cff-4420-9a79-4aa20c563d85","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-11T01:56:16Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=verify-enterprise-contract-97ca67eb0e556fc36d0364a063d34c34-pod namespace=chains-e2e-dmwr operation=CREATE policy=restrict-docker-io-images resource=chains-e2e-dmwr/Pod/verify-enterprise-contract-97ca67eb0e556fc36d0364a063d34c34-pod resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=a5fd02b8-a3a3-42ad-9f01-ba1735bd7899 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=87cd77f2-c007-42a2-94b4-8a4e2198d92b"],"authentication.kubernetes.io/node-name":["ip-10-0-132-195.ec2.internal"],"authentication.kubernetes.io/node-uid":["7418af5c-2da2-4e2b-8e54-161e5e037e4b"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-0"],"authentication.kubernetes.io/pod-uid":["e2766765-5819-4035-b8ac-6bf77c131b54"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"559a2e21-6cff-4420-9a79-4aa20c563d85","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-11T01:56:42Z TRC kyverno/pkg/webhooks/resource/mutation/mutation.go:131 > mutation rules from policy applied successfully URLParams= clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/mutate name=verify-enterprise-contract-f3810717462a4410a8a88ba2f1214285-pod namespace=chains-e2e-dmwr operation=CREATE policy=tekton-taskrun-resource-policy resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] rules=["set-task-resources"] uid=ed553a76-85f8-41c2-b7dd-371cee8a2365 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=e143863d-d1bc-4d62-a39c-61e6dbf1f637"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-1"],"authentication.kubernetes.io/pod-uid":["009728df-29d0-4e16-bf77-3fedcd728191"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"559a2e21-6cff-4420-9a79-4aa20c563d85","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-11T01:56:42Z TRC kyverno/pkg/webhooks/resource/mutation/mutation.go:131 > mutation rules from policy applied successfully URLParams= clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/mutate name=verify-enterprise-contract-f3810717462a4410a8a88ba2f1214285-pod namespace=chains-e2e-dmwr operation=CREATE policy=tekton-taskrun-resource-policy resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] rules=["set-task-resources"] uid=c3892e6c-1ed4-46aa-85db-2ac32986666e user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=e143863d-d1bc-4d62-a39c-61e6dbf1f637"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-1"],"authentication.kubernetes.io/pod-uid":["009728df-29d0-4e16-bf77-3fedcd728191"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"559a2e21-6cff-4420-9a79-4aa20c563d85","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-11T01:56:42Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=verify-enterprise-contract-f3810717462a4410a8a88ba2f1214285-pod namespace=chains-e2e-dmwr operation=CREATE policy=restrict-docker-io-images resource=chains-e2e-dmwr/Pod/verify-enterprise-contract-f3810717462a4410a8a88ba2f1214285-pod resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=683ae4a2-9f23-48e7-9b56-b44503de6ae8 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=e143863d-d1bc-4d62-a39c-61e6dbf1f637"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-1"],"authentication.kubernetes.io/pod-uid":["009728df-29d0-4e16-bf77-3fedcd728191"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"559a2e21-6cff-4420-9a79-4aa20c563d85","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-11T01:57:06Z TRC kyverno/pkg/webhooks/resource/mutation/mutation.go:131 > mutation rules from policy applied successfully URLParams= clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/mutate name=verify-enterprise-contract-45f155574afc3b1e5e7e800a91645a5d-pod namespace=chains-e2e-dmwr operation=CREATE policy=tekton-taskrun-resource-policy resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] rules=["set-task-resources"] uid=ba201b18-3a1a-49da-bc5b-a6f1c6014ec5 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=e143863d-d1bc-4d62-a39c-61e6dbf1f637"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-1"],"authentication.kubernetes.io/pod-uid":["009728df-29d0-4e16-bf77-3fedcd728191"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"559a2e21-6cff-4420-9a79-4aa20c563d85","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-11T01:57:06Z TRC kyverno/pkg/webhooks/resource/mutation/mutation.go:131 > mutation rules from policy applied successfully URLParams= clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/mutate name=verify-enterprise-contract-45f155574afc3b1e5e7e800a91645a5d-pod namespace=chains-e2e-dmwr operation=CREATE policy=tekton-taskrun-resource-policy resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] rules=["set-task-resources"] uid=773e3493-7a66-4602-8685-6694d6c7161a user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=e143863d-d1bc-4d62-a39c-61e6dbf1f637"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-1"],"authentication.kubernetes.io/pod-uid":["009728df-29d0-4e16-bf77-3fedcd728191"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"559a2e21-6cff-4420-9a79-4aa20c563d85","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-11T01:57:07Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=verify-enterprise-contract-45f155574afc3b1e5e7e800a91645a5d-pod namespace=chains-e2e-dmwr operation=CREATE policy=restrict-docker-io-images resource=chains-e2e-dmwr/Pod/verify-enterprise-contract-45f155574afc3b1e5e7e800a91645a5d-pod resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=22c49b27-1d23-4bb4-a7e0-1c90a4dc120e user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=e143863d-d1bc-4d62-a39c-61e6dbf1f637"],"authentication.kubernetes.io/node-name":["ip-10-0-171-231.ec2.internal"],"authentication.kubernetes.io/node-uid":["839b8a1a-662f-490c-9212-6298e80d9aa5"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-1"],"authentication.kubernetes.io/pod-uid":["009728df-29d0-4e16-bf77-3fedcd728191"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"559a2e21-6cff-4420-9a79-4aa20c563d85","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-11T01:57:08Z INF cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/rest/warnings.go:107 > Warning: kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ logger=klog v=0
2026-10-11T01:57:09Z INF cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/rest/warnings.go:107 > Warning: kyverno.io/v2 PolicyException is deprecated and will be removed in a future release; migrate to PolicyException (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ logger=klog v=0
2026-10-11T01:57:22Z TRC kyverno/pkg/webhooks/resource/mutation/mutation.go:131 > mutation rules from policy applied successfully URLParams= clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/mutate name=verify-enterprise-contract-3dd1507763e0affe99cfae57a9ffff61-pod namespace=chains-e2e-dmwr operation=CREATE policy=tekton-taskrun-resource-policy resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] rules=["set-task-resources"] uid=52d73862-7f62-48a9-918c-77da80e72bd9 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=87cd77f2-c007-42a2-94b4-8a4e2198d92b"],"authentication.kubernetes.io/node-name":["ip-10-0-132-195.ec2.internal"],"authentication.kubernetes.io/node-uid":["7418af5c-2da2-4e2b-8e54-161e5e037e4b"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-0"],"authentication.kubernetes.io/pod-uid":["e2766765-5819-4035-b8ac-6bf77c131b54"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"559a2e21-6cff-4420-9a79-4aa20c563d85","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-11T01:57:22Z TRC kyverno/pkg/webhooks/resource/mutation/mutation.go:131 > mutation rules from policy applied successfully URLParams= clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/mutate name=verify-enterprise-contract-3dd1507763e0affe99cfae57a9ffff61-pod namespace=chains-e2e-dmwr operation=CREATE policy=tekton-taskrun-resource-policy resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] rules=["set-task-resources"] uid=bafa2e7f-da20-459d-b972-0c1f81e31af1 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=87cd77f2-c007-42a2-94b4-8a4e2198d92b"],"authentication.kubernetes.io/node-name":["ip-10-0-132-195.ec2.internal"],"authentication.kubernetes.io/node-uid":["7418af5c-2da2-4e2b-8e54-161e5e037e4b"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-0"],"authentication.kubernetes.io/pod-uid":["e2766765-5819-4035-b8ac-6bf77c131b54"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"559a2e21-6cff-4420-9a79-4aa20c563d85","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-11T01:57:22Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=verify-enterprise-contract-3dd1507763e0affe99cfae57a9ffff61-pod namespace=chains-e2e-dmwr operation=CREATE policy=restrict-docker-io-images resource=chains-e2e-dmwr/Pod/verify-enterprise-contract-3dd1507763e0affe99cfae57a9ffff61-pod resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=a2b2fb23-8cff-4d95-bed9-d34122b5e0d8 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=87cd77f2-c007-42a2-94b4-8a4e2198d92b"],"authentication.kubernetes.io/node-name":["ip-10-0-132-195.ec2.internal"],"authentication.kubernetes.io/node-uid":["7418af5c-2da2-4e2b-8e54-161e5e037e4b"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-0"],"authentication.kubernetes.io/pod-uid":["e2766765-5819-4035-b8ac-6bf77c131b54"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"559a2e21-6cff-4420-9a79-4aa20c563d85","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2